Problem was originally reported running 12.10.FC12 on solaris64
and my repro confirms
the same issue exists on linux x86_64.
A query with a large number of elements in in-clause can cause a
variety of assertions
depending on the what memory was overwritten and to which
session the memory belonged.
The repro involves a query like this:
select id_medicao ,id_modeloarqestmeteo
,trim(id_estacaometeo) as
id_estacaometeo ,id_mnemonico ,din_medicao from
tb_medicaometeo
where (id_medicao > 389545314 or id_medicao in
(389506181,389289468,389335073,389480111,389427675,389494832,389
221293,389285338,
389486794,389373627,389404219,389456901,389442596,389419364,3892
30819, 389522996,
389448654,389486595,389514299,389380807,389541007,389197473,3895
06744,
389470838,389368637,389346889,389108925,389309582,389506233,3893
46527
,389292688,389399404,389391885,389347653,389321675,389225233,389
170130,
< close to 80,000 entries >
389482862,389527990,389390848,389201346,389327609,389489793,3892
54981,389322429,
389480527,389464977,389270968,389307663,389297378,389418849,3895
01001,389193556,
389131711,389473147,389368674,389403959,389468839))
order by
id_modeloarqestmeteo ,
trim(id_estacaometeo) ,
id_mnemonico ,
din_medicao;
The repro on linux x86_64 tends to reproduce this stack:
0x000000000142e343 (oninit) afsig_handler
0x0000003ddfa0e4c0 (Linux)
0x0000000000641124 (oninit) chkblobexpr
0x0000000000890d2d (oninit) mkexprnode
0x00000000007eba66 (oninit) oporindex
0x00000000007ece33 (oninit) opidxp
0x00000000007edccb (oninit) opscanp
0x00000000007ff329 (oninit) op_opinit
0x00000000007f110c (oninit) sqoptim
0x0000000000a2c36c (oninit) bldstructs
0x0000000000a30d25 (oninit) sqcmd
0x0000000000a3ba5a (oninit) sq_cmnd
0x0000000000a3bbb4 (oninit) sq_prepare
0x0000000000b0b011 (oninit) sqmain
0x000000000154ca1b (oninit) spawn_thread
0x0000000001411450 (oninit) th_init_initgls
0x0000000001456d88 (oninit) startup
The customer reported a stack like this on sol64
0x10059694c oninit :: cost_cmp_bycol + 0x10 sp=0x12dd6d8b0(0x0,
0x12dd6dcf0, 0x0, 0x0, 0x12ddd8038, 0x1)
0x10042c944 oninit :: sqoptim + 0x1f3c
sp=0x12dd6d970(0x12ddc0438, 0x3, 0x2, 0x0, 0x0, 0x1)
0x1006f7fa4 oninit :: bldstructs + 0x1dc
sp=0x12dd6de20(0x12ddc0438, 0x12dd6df8c, 0x0, 0x101cee4e0, 0x0,
0x0)
0x1006f7cd0 oninit :: sqcmd + 0x374 sp=0x12dd6ded0(0x12d117028,
0x12ddc0438, 0x101cee000, 0x12d212720, 0x2000, 0x0)
0x1006f7174 oninit :: sq_cmnd + 0x1e4 sp=0x12dd6df90(0x0,
0x101cee4b0, 0x12d0f20c0, 0x101cee4e8, 0x2, 0x0)
0x1006f77d8 oninit :: sq_prepare + 0x34 sp=0x12dd6e040(0x10,
0x0, 0x1, 0x0, 0x101cee000, 0x101cee)
0x1007d2300 oninit :: sqmain + 0x9b8 sp=0x12dd6e0f0(0x1006f77a4,
0x2, 0x1, 0x20000, 0x0, 0x200000)
0x101449e54 oninit :: listen_verify + 0x48c
sp=0x12dd6e1c0(0x12ab52e18, 0x101800, 0x1019c38c0, 0x12ac501c0,
0x3e9, 0x0)
0x101449624 oninit :: spawn_thread + 0x16bc
sp=0x12dd6e660(0x3e9, 0x12ba80fb0, 0x101cf2, 0x880d88, 0x101c00,
0x880c00)
0x1012dc2d8 oninit :: th_init_initgls + 0x170
sp=0x12dd6ed10(0x1019c3, 0x101800, 0x101447f68, 0x101cfe000,
0x132198550, 0x12d0f2bc8)
0x101308950 oninit :: startup + 0x1d0 sp=0x12dd6ee50(0xa,
0x101cf4010, 0x101cfe098, 0x0, 0x101ced9a0, 0x101cfe098)
On an active server, various other stack traces can be seen in
other assertion failures |
