MySQL Bugs: #836: another GROUP

Bug #836	another GROUP_CONCAT crash
Submitted:	11 Jul 2003 6:39	Modified:	15 Sep 2003 13:03
Reporter:	Daniel Penning	Email Updates:
Status:	Closed	Impact on me:	None
Category:	MySQL Server	Severity:	S1 (Critical)
Version:	4.1.0	OS:	Windows (Windows 2000)
Assigned to:	Vasily Kishkin	CPU Architecture:	Any

Description:
MySQL crashes when using GROUP_CONCAT in a query with more than one table.

How to repeat:
DROP TABLE IF EXISTS foo,bar;
CREATE TABLE foo(id int);
CREATE TABLE bar(id int);
INSERT INTO foo VALUES(0),(1);
SELECT GROUP_CONCAT(foo.id) FROM foo,bar;

Thank you for the bug report. Back trace:

>	mysqld.exe!copy_fields(TMP_TABLE_PARAM * param=0x02a36b58)  Line 7859 + 0x7	C++
 	mysqld.exe!Item_func_group_concat::add()  Line 1705 + 0xc	C++
 	mysqld.exe!Item_func_group_concat::reset()  Line 1698	C++
 	mysqld.exe!Item_sum::no_rows_in_result()  Line 81 + 0x1a	C++
 	mysqld.exe!return_zero_rows(JOIN * join=0x02a36108, select_result
                    * result=0x02a360f8, st_table_list * tables=0x02a36000,
                    List<Item> & fields={...}, int send_row=1, unsigned int
                    select_options=0, const char * info=0x007773a0, Item *
                    having=0x00000000, Procedure * procedure=0x00000000,
                    st_select_lex_unit * unit=0x011f00dc)  Line 3753 + 0xe	C++
 	mysqld.exe!JOIN::exec()  Line 981 + 0x8e	C++
 	mysqld.exe!mysql_select(THD * thd=0x011efe58, Item * * * rref_pointer_array=
                    0x011f024c, st_table_list * tables=0x02a36000, unsigned int
                    wild_num=0, List<Item> & fields={...}, Item * conds=0x00000000,
                    unsigned int og_num=0, st_order * order=0x00000000, st_order * 
                    group=0x00000000, Item * having=0x00000000, st_order *
                    proc_param=0x00000000, unsigned long select_options=84448256,
                    select_result * result=0x02a360f8, st_select_lex_unit * 
                    unit=0x011f00dc, st_select_lex * select_lex=0x011f01fc, int
                    tables_and_fields_initied=0)  Line 1426	C++
 	mysqld.exe!handle_select(THD * thd=0x011efe58, st_lex * lex=0x011f00d0,
                    select_result * result=0x02a360f8)  Line 190 + 0x93	C++
 	mysqld.exe!mysql_execute_command(THD * thd=0x011efe58)  Line 1787 + 0x11	C++
 	mysqld.exe!mysql_parse(THD * thd=0x011efe58, char * inBuf=0x02a35ce0,
                   unsigned int length=40)  Line 3629 + 0x9	C++
 	mysqld.exe!dispatch_command(enum_server_command command=COM_QUERY, THD
                   * thd=0x011efe58, char * packet=0x02a31c79, unsigned int 
                   packet_length=41)  Line 1304 + 0x1d	C++
 	mysqld.exe!do_command(THD * thd=0x011efe58)  Line 1099 + 0x37	C++
 	mysqld.exe!handle_one_connection(void * arg=0x011efe58)  Line 876 + 0x9	C++
 	mysqld.exe!pthread_start(void * param=0x011ff978)  Line 63 + 0x7	C
 	mysqld.exe!_threadstart(void * ptd=0x02a38e88)  Line 173 + 0xd	C
 	KERNEL32.DLL!77e8b2d8()

Thank you for your bug report. This issue has been committed to our
source repository of that product and will be incorporated into the
next release.

If necessary, you can access the source repository and build the latest
available version, including the bugfix, yourself. More information 
about accessing the source trees is available at
    http://www.mysql.com/doc/en/Installing_source_tree.html

fixed