mysqld.exe!Item::tmp_table_field_from_field_type(st_table * table=0x02c4eeb0, int fixed_length=0x00000001)  Line 4451 + 0x64 bytes	C++
mysqld.exe!create_tmp_field_from_item(THD * thd=0x02c21540, Item * item=0x02c51970, st_table * table=0x02c4eeb0, Item * * * copy_func=0x0504d924, int modify_item=0x00000001, unsigned int convert_blob_length=0x00000000)  Line 9139 + 0xe bytes	C++
mysqld.exe!create_tmp_field(THD * thd=0x02c21540, st_table * table=0x02c4eeb0, Item * item=0x02c51970, Item::Type type=SUBSELECT_ITEM, Item * * * copy_func=0x0504d924, Field * * from_field=0x02c4f6b0, Field * * default_field=0x02c4f698, int group=0x00000000, int modify_item=0x00000001, int table_cant_handle_bit_fields=0x00000000, int make_copy_field=0x00000000, unsigned int convert_blob_length=0x00000000)  Line 9333 + 0x26 bytes	C++
mysqld.exe!create_tmp_table(THD * thd=0x02c21540, TMP_TABLE_PARAM * param=0x02c58f14, List<Item> & fields={...}, st_order * group=0x00000000, int distinct=0x00000000, int save_sum_fields=0x00000000, unsigned __int64 select_options=0x0000000080044a00, unsigned long rows_limit=0xffffffff, char * table_alias=0x00b69092)  Line 9664 + 0xc4 bytes	C++
mysqld.exe!JOIN::optimize()  Line 1368 + 0xaa bytes	C++
mysqld.exe!mysql_select(THD * thd=0x02c21540, Item * * * rref_pointer_array=0x02c22730, TABLE_LIST * tables=0x02c50e38, unsigned int wild_num=0x00000000, List<Item> & fields={...}, Item * conds=0x00000000, unsigned int og_num=0x00000001, st_order * order=0x02c51a70, st_order * group=0x00000000, Item * having=0x00000000, st_order * proc_param=0x00000000, unsigned __int64 select_options=0x0000000080044a00, select_result * result=0x02c51b10, st_select_lex_unit * unit=0x02c22368, st_select_lex * select_lex=0x02c22620)  Line 2257 + 0x8 bytes	C++
mysqld.exe!handle_select(THD * thd=0x02c21540, st_lex * lex=0x02c22308, select_result * result=0x02c51b10, unsigned long setup_tables_done_option=0x00000000)  Line 258 + 0x9e bytes	C++
mysqld.exe!execute_sqlcom_select(THD * thd=0x02c21540, TABLE_LIST * all_tables=0x02c50e38)  Line 4539 + 0x13 bytes	C++
mysqld.exe!mysql_execute_command(THD * thd=0x02c21540)  Line 1883 + 0xd bytes	C++
mysqld.exe!mysql_parse(THD * thd=0x02c21540, const char * inBuf=0x02c50c98, unsigned int length=0x0000004d, const char * * found_semicolon=0x0504fcfc)  Line 5446 + 0x9 bytes	C++
mysqld.exe!dispatch_command(enum_server_command command=COM_QUERY, THD * thd=0x02c21540, char * packet=0x02c489a9, unsigned int packet_length=0x0000004e)  Line 953 + 0x1e bytes	C++
mysqld.exe!do_command(THD * thd=0x02c21540)  Line 712 + 0x31 bytes	C++
mysqld.exe!handle_one_connection(void * arg=0x02c21540)  Line 1094 + 0x9 bytes	C++
mysqld.exe!pthread_start(void * param=0x02c3a0e8)  Line 62 + 0x9 bytes	C
mysqld.exe!_callthreadstart()  Line 293 + 0xf bytes	C
mysqld.exe!_threadstart(void * ptd=0x02c4c9e0)  Line 277	C
kernel32.dll!FlsSetValue()  + 0x136 bytes	



crash is here:

case MYSQL_TYPE_GEOMETRY:
    field= new Field_geom(max_length, maybe_null, name, table->s,
                          (Field::geometry_type)
                          ((type() == Item::TYPE_HOLDER) ?
                           ((Item_type_holder *)this)->get_geometry_type() :
                           ((Item_geometry_func *)this)->get_geometry_type()));
  }