MySQL Bugs: #6596: Query with many brackets crash the server even when no table involved.

Bug #6596	Query with many brackets crash the server even when no table involved.
Submitted:	12 Nov 2004 15:48	Modified:	11 Jan 2005 19:17
Reporter:	Vytautas Mieliauskas	Email Updates:
Status:	Can't repeat	Impact on me:	None
Category:	MySQL Server	Severity:	S3 (Non-critical)
Version:	4.0.20 - 64bit version	OS:	Solaris (Solaris 9)
Assigned to:		CPU Architecture:	Any

Description:
After query containing many brackets mysqld crashes this on of the following messages:

mysqld got signal 10;
This could be because you hit a bug. It is also possible that this binary
or one of the libraries it was linked against is corrupt, improperly built,
or misconfigured. This error can also be caused by malfunctioning hardware.
We will try our best to scrape up some info that will hopefully help diagnose
the problem, but since we have already crashed, something is definitely wrong
and this may fail.

-OR-

mysqld got signal 11;
This could be because you hit a bug. It is also possible that this binary
or one of the libraries it was linked against is corrupt, improperly built,
or misconfigured. This error can also be caused by malfunctioning hardware.
We will try our best to scrape up some info that will hopefully help diagnose
the problem, but since we have already crashed, something is definitely wrong
and this may fail.

Environment:
SunOS XXX 5.9 Generic_117171-07 sun4u sparc SUNW,Sun-Fire-280R

How to repeat:
Run the following query:

select ((((((((((((((((((((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
now()
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
)))))))))))))))))))))))))))))))))))))))))))))))));

Can't repeat with 4.1.8-debug-log on Linux

4.1.8-debug-log
[17:07] root@test> select ((((((((((((((((((((((((((((((((((((((((((((((((((((
    -> ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
    -> ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
    -> now()
    -> )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    -> ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    -> )))))))))))))))))))))))))))))))))))))))))))))))));
+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| ((((((((((((((((((((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
now()
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
)))))))) |
+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| 2004-11-13 17:08:25                                                                                                                                                                                                                                             |
+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
1 row in set (0.00 sec)

could be related to http://bugs.mysql.com/1569

Mysqld is 64bit. seems to be related to 1569 indeed.

Thank you for taking the time to report a problem.  Unfortunately
you are not using a current version of the product your reported a
problem with -- the problem might already be fixed. Please download
a new version from http://www.mysql.com/downloads/

If you are able to reproduce the bug with one of the latest versions,
please change the version on this bug report to the version you
tested and change the status back to "Open".  Again, thank you for
your continued support of MySQL.

Additional info:

I was unable to reproduce this bug using 4.0.23 - 64bit solaris 9