MySQL Bugs: #38157: Crash in Query Cache store

Bug #38157	Crash in Query Cache store
Submitted:	16 Jul 2008 1:20	Modified:	10 Oct 2008 13:25
Reporter:	Gary Pendergast	Email Updates:
Status:	No Feedback	Impact on me:	None
Category:	MySQL Server: Query Cache	Severity:	S2 (Serious)
Version:	5.0.56	OS:	Linux
Assigned to:	Assigned Account	CPU Architecture:	Any

Description:
Crash in Query Cache. Stack trace:

Thread 13 (process 5065):
#0  0x00002b81babd4332 in select () from /lib64/libc.so.6
#1  0x000000000057763c in handle_connections_sockets ()
#2  0x0000000000579c11 in main ()

Thread 12 (process 5067):
#0  0x00002b81ba2244b6 in pthread_cond_wait@@GLIBC_2.3.2 ()
    from /lib64/libpthread.so.0
#1  0x000000000078ac85 in os_event_wait_low ()
#2  0x000000000078e241 in os_aio_simulated_handle ()
#3  0x0000000000757518 in fil_aio_wait ()
#4  0x000000000069f10c in srv_normalize_path_for_win ()
#5  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#6  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 11 (process 5068):
#0  0x00002b81ba2244b6 in pthread_cond_wait@@GLIBC_2.3.2 ()
    from /lib64/libpthread.so.0
#1  0x000000000078ac85 in os_event_wait_low ()
#2  0x000000000078e241 in os_aio_simulated_handle ()
#3  0x0000000000757518 in fil_aio_wait ()
#4  0x000000000069f10c in srv_normalize_path_for_win ()
#5  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#6  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 10 (process 5069):
#0  0x00002b81ba2244b6 in pthread_cond_wait@@GLIBC_2.3.2 ()
    from /lib64/libpthread.so.0
#1  0x000000000078ac85 in os_event_wait_low ()
#2  0x000000000078e241 in os_aio_simulated_handle ()
#3  0x0000000000757518 in fil_aio_wait ()
#4  0x000000000069f10c in srv_normalize_path_for_win ()
#5  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#6  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 9 (process 5070):
#0  0x00002b81ba2244b6 in pthread_cond_wait@@GLIBC_2.3.2 ()
    from /lib64/libpthread.so.0
#1  0x000000000078ac85 in os_event_wait_low ()
#2  0x000000000078e241 in os_aio_simulated_handle ()
#3  0x0000000000757518 in fil_aio_wait ()
#4  0x000000000069f10c in srv_normalize_path_for_win ()
#5  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#6  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 8 (process 5072):
#0  0x00002b81babd4332 in select () from /lib64/libc.so.6
#1  0x000000000078b09b in os_thread_sleep ()
#2  0x000000000069d405 in srv_lock_timeout_and_monitor_thread ()
#3  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#4  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 7 (process 5073):
#0  0x00002b81babd4332 in select () from /lib64/libc.so.6
#1  0x000000000078b09b in os_thread_sleep ()
#2  0x000000000069da30 in srv_error_monitor_thread ()
#3  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#4  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 6 (process 5074):
#0  0x00002b81ba2244b6 in pthread_cond_wait@@GLIBC_2.3.2 ()
    from /lib64/libpthread.so.0
#1  0x000000000078ac85 in os_event_wait_low ()
#2  0x000000000069e5e6 in srv_master_thread ()
#3  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#4  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 5 (process 5075):
#0  0x00002b81ba227bb8 in do_sigwait () from /lib64/libpthread.so.0
#1  0x00002b81ba227c5d in sigwait () from /lib64/libpthread.so.0
#2  0x0000000000575701 in signal_hand ()
#3  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#4  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 4 (process 5112):
#0  0x00002b81ba226c9b in read () from /lib64/libpthread.so.0
#1  0x00000000007c5d68 in vio_read ()
#2  0x000000000056e8d5 in net_realloc ()
#3  0x000000000056ed53 in my_net_read ()
#4  0x0000000000592e19 in handle_one_connection ()
#5  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#6  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 3 (process 5116):
#0  0x00002b81ba226c9b in read () from /lib64/libpthread.so.0
#1  0x00000000007c5d68 in vio_read ()
#2  0x000000000056e8d5 in net_realloc ()
#3  0x000000000056ed53 in my_net_read ()
#4  0x0000000000592e19 in handle_one_connection ()
#5  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#6  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 2 (process 5168):
#0  0x00002b81ba226c9b in read () from /lib64/libpthread.so.0
#1  0x00000000007c5d68 in vio_read ()
#2  0x000000000056e8d5 in net_realloc ()
#3  0x000000000056ed53 in my_net_read ()
#4  0x0000000000592e19 in handle_one_connection ()
#5  0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#6  0x00002b81babdaded in clone () from /lib64/libc.so.6

Thread 1 (process 5121):
#0  0x00002b81ba225142 in pthread_kill () from /lib64/libpthread.so.0
#1  0x0000000000576f62 in handle_segfault ()
#2  <signal handler called>
#3  0x00000000007d24b9 in list_free ()
#4  0x00000000007d304e in my_hash_insert ()
#5  0x000000000065f390 in Query_cache::insert_table ()
#6  0x000000000065f63a in Query_cache::register_tables_from_list ()
#7  0x000000000065f6a5 in Query_cache::register_all_tables ()
#8  0x000000000065fc0a in Query_cache::store_query ()
#9  0x000000000058cd38 in mysql_execute_command ()
#10 0x0000000000590dab in mysql_parse ()
#11 0x000000000059126e in dispatch_command ()
#12 0x0000000000592e5b in handle_one_connection ()
#13 0x00002b81ba220307 in start_thread () from /lib64/libpthread.so.0
#14 0x00002b81babdaded in clone () from /lib64/libc.so.6

How to repeat:
See attached core file.

Suggested fix:
Don't crash. Current work around is to disable Query Cache.

could be a duplicate of bug #33362

Omer the usage scenario here is when invalidation happens on too many tables, such as in the case of a huge merge table.  the query cache then causes memory corruption and hung, crash, or glibc errors can result.

This could be fixed with fix from bug #33362.

It was fixed with version 5.0.58 ... Please try newest bzr tree and let us know if you still have this problem.

No feedback was provided for this bug for over a month, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".