==3576== Invalid read of size 4 ==3576== at 0x814236C: Item_field::used_tables() const (item.cc:2124) ==3576== by 0x823B6C7: setup_fields(THD*, Item**, List&, enum_mark_columns, List*, bool) (sql_base.cc:7400) ==3576== by 0x825D9F1: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:485) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== Address 0x77B5B74 is 540 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26E8: free_root (my_alloc.c:355) ==3576== by 0x8248877: closefrm(st_table*, bool) (table.cc:1985) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x8142371: Item_field::used_tables() const (item.cc:2124) ==3576== by 0x823B6C7: setup_fields(THD*, Item**, List&, enum_mark_columns, List*, bool) (sql_base.cc:7400) ==3576== by 0x825D9F1: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:485) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== Address 0x6025CEF is 1,567 bytes inside a block of size 1,700 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== by 0x834D05D: sp_head::execute_procedure(THD*, List*) (sp_head.cc:1977) ==3576== by 0x82098B2: mysql_execute_command(THD*) (sql_parse.cc:4230) ==3576== ==3576== Invalid read of size 4 ==3576== at 0x8142390: Item_field::used_tables() const (item.cc:2126) ==3576== by 0x823B6C7: setup_fields(THD*, Item**, List&, enum_mark_columns, List*, bool) (sql_base.cc:7400) ==3576== by 0x825D9F1: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:485) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== Address 0x6025CB4 is 1,508 bytes inside a block of size 1,700 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== by 0x834D05D: sp_head::execute_procedure(THD*, List*) (sp_head.cc:1977) ==3576== by 0x82098B2: mysql_execute_command(THD*) (sql_parse.cc:4230) ==3576== ==3576== Invalid read of size 4 ==3576== at 0x8142396: Item_field::used_tables() const (item.cc:2126) ==3576== by 0x823B6C7: setup_fields(THD*, Item**, List&, enum_mark_columns, List*, bool) (sql_base.cc:7400) ==3576== by 0x825D9F1: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:485) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== Address 0x6025CB8 is 1,512 bytes inside a block of size 1,700 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== by 0x834D05D: sp_head::execute_procedure(THD*, List*) (sp_head.cc:1977) ==3576== by 0x82098B2: mysql_execute_command(THD*) (sql_parse.cc:4230) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x84E1BAA: my_strcasecmp_utf8 (ctype-utf8.c:2478) ==3576== by 0x823B04E: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77272A7 is 855 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x84E1BB5: my_strcasecmp_utf8 (ctype-utf8.c:2478) ==3576== by 0x823B04E: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77272A7 is 855 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x84E1C42: my_strcasecmp_utf8 (ctype-utf8.c:2552) ==3576== by 0x823B04E: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77272AC is 860 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400634B: strcmp (mc_replace_strmem.c:341) ==3576== by 0x823B1EC: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77A2980 is 0 bytes inside a block of size 4 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x82487CE: closefrm(st_table*, bool) (table.cc:1960) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400634E: strcmp (mc_replace_strmem.c:341) ==3576== by 0x823B1EC: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77A2980 is 0 bytes inside a block of size 4 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x82487CE: closefrm(st_table*, bool) (table.cc:1960) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400636A: strcmp (mc_replace_strmem.c:341) ==3576== by 0x823B1EC: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77A2981 is 1 bytes inside a block of size 4 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x82487CE: closefrm(st_table*, bool) (table.cc:1960) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400636E: strcmp (mc_replace_strmem.c:341) ==3576== by 0x823B1EC: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77A2981 is 1 bytes inside a block of size 4 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x82487CE: closefrm(st_table*, bool) (table.cc:1960) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400634B: strcmp (mc_replace_strmem.c:341) ==3576== by 0x823B215: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77271A0 is 592 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400634E: strcmp (mc_replace_strmem.c:341) ==3576== by 0x823B215: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77271A0 is 592 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400636A: strcmp (mc_replace_strmem.c:341) ==3576== by 0x823B215: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77271A1 is 593 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400636E: strcmp (mc_replace_strmem.c:341) ==3576== by 0x823B215: find_item_in_list(Item*, List&, unsigned*, find_item_error_report_type, enum_resolution_type*) (sql_base.cc:6407) ==3576== by 0x8253743: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14145) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77271A1 is 593 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x4006278: strlen (mc_replace_strmem.c:246) ==3576== by 0x823E39E: find_field_in_tables(THD*, Item_ident*, TABLE_LIST*, TABLE_LIST*, Item**, find_item_error_report_type, bool, bool) (sql_base.cc:6129) ==3576== by 0x8253844: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14172) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77272A7 is 855 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x4006283: strlen (mc_replace_strmem.c:246) ==3576== by 0x823E39E: find_field_in_tables(THD*, Item_ident*, TABLE_LIST*, TABLE_LIST*, Item**, find_item_error_report_type, bool, bool) (sql_base.cc:6129) ==3576== by 0x8253844: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14172) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77272A8 is 856 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x823E3C3: find_field_in_tables(THD*, Item_ident*, TABLE_LIST*, TABLE_LIST*, Item**, find_item_error_report_type, bool, bool) (sql_base.cc:6135) ==3576== by 0x8253844: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14172) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== Address 0x77A2980 is 0 bytes inside a block of size 4 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x82487CE: closefrm(st_table*, bool) (table.cc:1960) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x84E1BB5: my_strcasecmp_utf8 (ctype-utf8.c:2478) ==3576== by 0x823D1F1: find_field_in_table(THD*, st_table*, char const*, unsigned, bool, unsigned*) (sql_base.cc:5806) ==3576== by 0x823E855: find_field_in_tables(THD*, Item_ident*, TABLE_LIST*, TABLE_LIST*, Item**, find_item_error_report_type, bool, bool) (sql_base.cc:6162) ==3576== by 0x8253844: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14172) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== Address 0x77272A7 is 855 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x84E1C42: my_strcasecmp_utf8 (ctype-utf8.c:2552) ==3576== by 0x823D1F1: find_field_in_table(THD*, st_table*, char const*, unsigned, bool, unsigned*) (sql_base.cc:5806) ==3576== by 0x823E855: find_field_in_tables(THD*, Item_ident*, TABLE_LIST*, TABLE_LIST*, Item**, find_item_error_report_type, bool, bool) (sql_base.cc:6162) ==3576== by 0x8253844: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14172) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== Address 0x77272AC is 860 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 4 ==3576== at 0x82539BD: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14177) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== Address 0x77B5B68 is 528 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26E8: free_root (my_alloc.c:355) ==3576== by 0x8248877: closefrm(st_table*, bool) (table.cc:1985) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== ==3576== Invalid read of size 4 ==3576== at 0x81DBD62: Field::eq(Field*) (field.h:150) ==3576== by 0x82539C8: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14177) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== Address 0x77B5B6C is 532 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26E8: free_root (my_alloc.c:355) ==3576== by 0x8248877: closefrm(st_table*, bool) (table.cc:1985) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x400624D: strnlen (mc_replace_strmem.c:230) ==3576== by 0x84E747B: my_vsnprintf (my_vsnprintf.c:100) ==3576== by 0x82817BD: push_warning_printf(THD*, MYSQL_ERROR::enum_warning_level, unsigned, char const*, ...) (sql_error.cc:182) ==3576== by 0x82538C0: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14213) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== Address 0x77272A7 is 855 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x4006256: strnlen (mc_replace_strmem.c:230) ==3576== by 0x84E747B: my_vsnprintf (my_vsnprintf.c:100) ==3576== by 0x82817BD: push_warning_printf(THD*, MYSQL_ERROR::enum_warning_level, unsigned, char const*, ...) (sql_error.cc:182) ==3576== by 0x82538C0: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14213) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== Address 0x77272A8 is 856 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x84D3BE8: strnmov (strings-x86.s:353) ==3576== by 0x82817BD: push_warning_printf(THD*, MYSQL_ERROR::enum_warning_level, unsigned, char const*, ...) (sql_error.cc:182) ==3576== by 0x82538C0: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14213) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77272A7 is 855 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 1 ==3576== at 0x84D3BEA: strnmov (strings-x86.s:354) ==3576== by 0x82817BD: push_warning_printf(THD*, MYSQL_ERROR::enum_warning_level, unsigned, char const*, ...) (sql_error.cc:182) ==3576== by 0x82538C0: _ZL18find_order_in_listP3THDPP4ItemP10TABLE_LISTP8st_orderR4ListIS1_ESA_b (sql_select.cc:14213) ==3576== by 0x8253A7C: setup_group(THD*, Item**, TABLE_LIST*, List&, List&, st_order*, bool*) (sql_select.cc:14306) ==3576== by 0x825DB5E: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:415) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== Address 0x77272A7 is 855 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26C0: free_root (my_alloc.c:349) ==3576== by 0x824873D: free_table_share(st_table_share*) (table.cc:431) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x8248897: closefrm(st_table*, bool) (table.cc:1981) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== ==3576== Invalid read of size 4 ==3576== at 0x81570F9: Item_field::field_type() const (item.h:1456) ==3576== by 0x825DF89: JOIN::prepare(Item***, TABLE_LIST*, unsigned, Item*, unsigned, st_order*, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*) (sql_select.cc:570) ==3576== by 0x8336AD3: st_select_lex_unit::prepare(THD*, select_result*, unsigned long) (sql_union.cc:264) ==3576== by 0x8338593: mysql_derived_prepare(THD*, st_lex*, TABLE_LIST*) (sql_derived.cc:151) ==3576== by 0x83382B5: mysql_handle_derived(st_lex*, bool (*)(THD*, st_lex*, TABLE_LIST*)) (sql_derived.cc:56) ==3576== by 0x828758F: mysql_multi_update_prepare(THD*) (sql_update.cc:969) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) ==3576== by 0x834C997: sp_head::execute(THD*) (sp_head.cc:1248) ==3576== by 0x834D05D: sp_head::execute_procedure(THD*, List*) (sp_head.cc:1977) ==3576== Address 0x77B5B68 is 528 bytes inside a block of size 996 free'd ==3576== at 0x400501A: free (vg_replace_malloc.c:233) ==3576== by 0x84B26E8: free_root (my_alloc.c:355) ==3576== by 0x8248877: closefrm(st_table*, bool) (table.cc:1985) ==3576== by 0x823E9D9: _ZL16free_cache_entryP8st_table (sql_base.cc:771) ==3576== by 0x84BA94B: my_hash_delete (hash.c:530) ==3576== by 0x823EFBA: close_thread_table(THD*, st_table**) (sql_base.cc:1357) ==3576== by 0x823F47B: close_thread_tables(THD*) (sql_base.cc:1166) ==3576== by 0x8287BF7: mysql_multi_update_prepare(THD*) (sql_update.cc:1130) ==3576== by 0x8206BE2: mysql_execute_command(THD*) (sql_parse.cc:2976) ==3576== by 0x834A1C0: sp_instr_stmt::exec_core(THD*, unsigned*) (sp_head.cc:2899) ==3576== by 0x834E381: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned*, bool, sp_instr*) (sp_head.cc:2728) ==3576== by 0x834F029: sp_instr_stmt::execute(THD*, unsigned*) (sp_head.cc:2842) mysqld: my_new.cc:50: int __cxa_pure_virtual(): Assertion `"Pure virtual method called." == "Aborted"' failed. 081230 8:15:51 - mysqld got signal 6 ; This could be because you hit a bug. It is also possible that this binary or one of the libraries it was linked against is corrupt, improperly built, or misconfigured. This error can also be caused by malfunctioning hardware. We will try our best to scrape up some info that will hopefully help diagnose the problem, but since we have already crashed, something is definitely wrong and this may fail. key_buffer_size=8388600 read_buffer_size=131072 max_used_connections=21 max_threads=151 threads_connected=21 It is possible that mysqld could use up to key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 343118 K bytes of memory Hope that's ok; if not, decrease some variables in the equation. thd: 0x1f97c8a8 Attempting backtrace. You can use the following information to find out where mysqld died. If you see no messages after this, something went terribly wrong... stack_bottom = 0x506c3b8 thread_stack 0x30000 ./bin/mysqld(my_print_stacktrace+0x21)[0x84c64f1] ./bin/mysqld(handle_segfault+0x381)[0x81f6261] /lib/libpthread.so.0[0x491218] /lib/libc.so.6(abort+0x101)[0x333591] /lib/libc.so.6(__assert_fail+0xfb)[0x32b38b] ./bin/mysqld(__cxa_pure_virtual+0x36)[0x84b2ec6] ./bin/mysqld(_ZN4JOIN7prepareEPPP4ItemP10TABLE_LISTjS1_jP8st_orderS7_S1_S7_P13st_select_lexP18st_select_lex_unit+0x79a)[0x825df8a] ./bin/mysqld(_ZN18st_select_lex_unit7prepareEP3THDP13select_resultm+0x7c4)[0x8336ad4] ./bin/mysqld(_Z21mysql_derived_prepareP3THDP6st_lexP10TABLE_LIST+0xe4)[0x8338594] ./bin/mysqld(_Z20mysql_handle_derivedP6st_lexPFbP3THDS0_P10TABLE_LISTE+0x66)[0x83382b6] ./bin/mysqld(_Z26mysql_multi_update_prepareP3THD+0xc0)[0x8287590] ./bin/mysqld(_Z21mysql_execute_commandP3THD+0x1093)[0x8206be3] ./bin/mysqld(_ZN13sp_instr_stmt9exec_coreEP3THDPj+0x11)[0x834a1c1] ./bin/mysqld(_ZN13sp_lex_keeper23reset_lex_and_exec_coreEP3THDPjbP8sp_instr+0xc2)[0x834e382] ./bin/mysqld(_ZN13sp_instr_stmt7executeEP3THDPj+0x10a)[0x834f02a] ./bin/mysqld(_ZN7sp_head7executeEP3THD+0x4d8)[0x834c998] ./bin/mysqld(_ZN7sp_head17execute_procedureEP3THDP4ListI4ItemE+0x4fe)[0x834d05e] ./bin/mysqld(_Z21mysql_execute_commandP3THD+0x3d63)[0x82098b3] ./bin/mysqld(_Z11mysql_parseP3THDPKcjPS2_+0x340)[0x820d1c0] ./bin/mysqld(_Z16dispatch_command19enum_server_commandP3THDPcj+0xe98)[0x820e068] ./bin/mysqld(_Z10do_commandP3THD+0xe0)[0x820ebf0] ./bin/mysqld(handle_one_connection+0x233)[0x81ff8a3] /lib/libpthread.so.0[0x4893db] /lib/libc.so.6(clone+0x5e)[0x3d606e] Trying to get some variables. Some pointers may be invalid and cause the dump to abort... thd->query at 0x1d989e90 is an invalid pointer thd->thread_id=30 thd->killed=NOT_KILLED The manual page at http://dev.mysql.com/doc/mysql/en/crashing.html contains information that should help you find out what is causing the crash. --3576-- Discarding syms at 0x4E52000-0x4E5D000 in /lib/libnss_files-2.5.so due to munmap() ==3576== ==3576== ERROR SUMMARY: 1128 errors from 31 contexts (suppressed: 22 from 1) ==3576==