This is enough to reproduce for me: ``` /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/mysql-test $ ./mtr query_rewrite_plugins.logging_general_raw [...] 2023-01-18T03:29:41.746199Z 0 [Note] [MY-011240] [Server] Plugin mysqlx reported: 'Using SSL configuration from MySQL Server' 2023-01-18T03:29:41.747565Z 0 [Note] [MY-011243] [Server] Plugin mysqlx reported: 'Using OpenSSL for TLS connections' 2023-01-18T03:29:41.747643Z 0 [System] [MY-011323] [Server] X Plugin ready for connections. Bind-address: '::' port: 13020, socket: /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/mysql-test/var/tmp/mysqlx.1.sock 2023-01-18T03:29:41.747668Z 0 [System] [MY-010931] [Server] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/runtime_output_directory/mysqld: ready for connections. Version: '8.0.32' socket: '/var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/mysql-test/var/tmp/mysqld.1.sock' port: 13000 Gentoo Linux mysql-8.0.32. *** buffer overflow detected ***: terminated 2023-01-18T03:29:41Z UTC - mysqld got signal 6 ; Most likely, you have hit a bug, but this error can also be caused by malfunctioning hardware. BuildID[sha1]=d23597702155e320db9f1bf9facdaab19b9a1279 Thread pointer: 0x7fc55c4bb490 Attempting backtrace. You can use the following information to find out where mysqld died. If you see no messages after this, something went terribly wrong... stack_bottom = 7fc557ffec90 thread_stack 0x100000 /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/runtime_output_directory/mysqld(my_print_stacktrace(unsigned char const*, unsigned long)+0x40) [0x5650826409b0] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/runtime_output_directory/mysqld(print_fatal_signal(int)+0x2a1) [0x5650818ba881] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/runtime_output_directory/mysqld(handle_fatal_signal+0x95) [0x5650818baa15] /usr/lib64/libc.so.6(+0x38e40) [0x7fc5c9db1e40] /usr/lib64/libc.so.6(+0x8ad0c) [0x7fc5c9e03d0c] /usr/lib64/libc.so.6(gsignal+0x16) [0x7fc5c9db1d96] /usr/lib64/libc.so.6(abort+0xd7) [0x7fc5c9d9b7fc] /usr/lib64/libc.so.6(+0x7e666) [0x7fc5c9df7666] /usr/lib64/libc.so.6(__fortify_fail+0x32) [0x7fc5c9e951a2] /usr/lib64/libc.so.6(+0x11aa86) [0x7fc5c9e93a86] /usr/lib64/libc.so.6(__snprintf_chk+0xd5) [0x7fc5c9e936a5] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/plugin_output_directory/rewriter.so(services::print_digest[abi:cxx11](unsigned char const*)+0x70) [0x7fc5c06ee1a0] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/plugin_output_directory/rewriter.so(Rewriter::load_rule(THD*, Persisted_rule*)+0x322) [0x7fc5c06e6ae2] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/plugin_output_directory/rewriter.so(Rewriter::do_refresh(THD*)+0x442) [0x7fc5c06e8552] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/plugin_output_directory/rewriter.so(refresh_callback+0x14) [0x7fc5c06e8b14] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/runtime_output_directory/mysqld(+0x1e942d4) [0x5650817482d4] /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/runtime_output_directory/mysqld(+0x326edbe) [0x565082b22dbe] /usr/lib64/libc.so.6(+0x88fab) [0x7fc5c9e01fab] /usr/lib64/libc.so.6(+0x10cda0) [0x7fc5c9e85da0] Trying to get some variables. Some pointers may be invalid and cause the dump to abort. Query (7fc5509e5bd8): SELECT"The_rewritten_query" Connection ID (thread ID): 11 Status: NOT_KILLED [...] ``` With gdb (it wasn't as helpful as I'd hoped, I couldn't inspect anything): ``` /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/mysql-test $ ./mtr query_rewrite_plugins.logging_general_raw --manual-gdb Logging: /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql/mysql-test/mysql-test-run.pl query_rewrite_plugins.logging_general_raw --manual-gdb MySQL Version 8.0.32 Checking supported features mysqltest: [Warning] unknown variable 'loose-default-auth=mysql_native_password'. Using 'all' suites Collecting tests Checking leftover processes Removing old var directory Creating var directory '/var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/mysql-test/var' Installing system database Using parallel: 1 ============================================================================== TEST NAME RESULT TIME (ms) COMMENT ------------------------------------------------------------------------------ To start gdb for mysqld.1, type in another window: gdb -cd /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql/mysql-test -x /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/mysql-test/var/tmp/gdbinit.mysqld.1 /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql_build/runtime_output_directory/mysqld ``` ``` *** buffer overflow detected ***: terminated Thread 51 "parser_srv" received signal SIGABRT, Aborted. [Switching to Thread 0x7fffb0ff96c0 (LWP 2294051)] 0x00007ffff6f38d0c in ?? () from /usr/lib64/libc.so.6 (gdb) bt #0 0x00007ffff6f38d0c in ?? () from /usr/lib64/libc.so.6 #1 0x00007ffff6ee6d96 in raise () from /usr/lib64/libc.so.6 #2 0x00007ffff6ed07fc in abort () from /usr/lib64/libc.so.6 #3 0x00007ffff6f2c666 in ?? () from /usr/lib64/libc.so.6 #4 0x00007ffff6fca1a2 in __fortify_fail () from /usr/lib64/libc.so.6 #5 0x00007ffff6fc8a86 in __chk_fail () from /usr/lib64/libc.so.6 #6 0x00007ffff6fc86a5 in __snprintf_chk () from /usr/lib64/libc.so.6 #7 0x00007fffed0221a0 in snprintf () at /usr/include/bits/stdio2.h:54 #8 services::print_digest[abi:cxx11](unsigned char const*) () at /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql/plugin/rewriter/services.cc:45 #9 0x00007fffed01aae2 in Rewriter::load_rule () at /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql/plugin/rewriter/rewriter.cc:77 #10 0x00007fffed01c552 in Rewriter::do_refresh () at /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql/plugin/rewriter/rewriter.cc:144 #11 0x00007fffed01cb14 in refresh_callback () at /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql/plugin/rewriter/rewriter.cc:165 #12 0x00005555573e82d4 in parser_service_start_routine () at /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql/sql/parser_service.cc:182 #13 0x00005555587c2dbe in pfs_spawn_thread () at /var/tmp/portage/dev-db/mysql-8.0.32/work/mysql/storage/perfschema/pfs.cc:2986 #14 0x00007ffff6f36fab in ?? () from /usr/lib64/libc.so.6 #15 0x00007ffff6fbada0 in ?? () from /usr/lib64/libc.so.6 (gdb) ```
Portage 3.0.44 (python 3.11.1-final-0, default/linux/amd64/17.1/hardened, gcc-12, glibc-2.36-r6, 5.15.88-gentoo-dist-hardened x86_64) ================================================================= System uname: Linux-5.15.88-gentoo-dist-hardened-x86_64-AMD_Ryzen_9_3950X_16-Core_Processor-with-glibc2.36 KiB Mem: 65763864 total, 20916760 free KiB Swap: 8290300 total, 6624764 free Timestamp of repository gentoo: Wed, 18 Jan 2023 01:32:20 +0000 Head commit of repository gentoo: 5d1f0d09effedbf8bf29565817333fb2071598ec Timestamp of repository emacs: Tue, 03 Jan 2023 09:03:30 +0000 Head commit of repository emacs: 44cd1dcebb0e68efc58d2332dd967922368dc6db Timestamp of repository kde: Mon, 16 Jan 2023 21:17:21 +0000 Head commit of repository kde: c058946d9156c5d824bc1076c76f1827bc88eac4 Timestamp of repository qt: Mon, 16 Jan 2023 21:17:16 +0000 Head commit of repository qt: e06df1df9866ac9c391858544661d1fae22de2f2 Timestamp of repository sam_c: Tue, 17 Jan 2023 01:04:07 +0000 Head commit of repository sam_c: 3ff8b85750966b3a0716a06fd811cfc82a26f878 Timestamp of repository steam-overlay: Mon, 16 Jan 2023 21:17:17 +0000 Head commit of repository steam-overlay: 399dcc47ff5087990d25290ecd2f17a61704e41d sh dash 0.5.12 ld GNU ld (Gentoo 2.40 p1) 2.40 ccache version 4.7.4 [disabled] app-misc/pax-utils: 1.3.6-r1::gentoo app-shells/bash: 5.2_p15-r1::gentoo dev-java/java-config: 2.3.1::gentoo dev-lang/perl: 5.36.0-r1::gentoo dev-lang/python: 3.9.16::gentoo, 3.10.9::gentoo, 3.11.1::gentoo, 3.12.0_alpha4::gentoo dev-lang/rust: 1.66.1::gentoo dev-util/ccache: 4.7.4::gentoo dev-util/cmake: 3.25.1::gentoo dev-util/meson: 1.0.0::gentoo sys-apps/baselayout: 2.9::gentoo sys-apps/sandbox: 2.30-r1::gentoo sys-apps/systemd: 252.4-r1::gentoo sys-devel/autoconf: 2.13-r7::gentoo, 2.71-r5::gentoo sys-devel/automake: 1.16.5::gentoo sys-devel/binutils: 2.40::gentoo sys-devel/binutils-config: 5.5::gentoo sys-devel/clang: 15.0.7-r1::gentoo, 16.0.0_pre20230107::gentoo sys-devel/gcc: 10.4.1_p20230112::gentoo, 11.3.1_p20230113::gentoo, 12.2.1_p20230114::gentoo, 13.0.0_pre20230115::gentoo sys-devel/gcc-config: 2.10::gentoo sys-devel/libtool: 2.4.7-r1::gentoo sys-devel/lld: 15.0.7::gentoo, 16.0.0_pre20230107::gentoo sys-devel/llvm: 14.0.6-r2::gentoo, 15.0.7::gentoo, 16.0.0_pre20230107::gentoo sys-devel/make: 4.4.0.90::gentoo sys-kernel/linux-headers: 6.1::gentoo (virtual/os-headers) sys-libs/glibc: 2.36-r6::gentoo Repositories: gentoo location: /var/db/repos/gentoo sync-type: git sync-uri: https://github.com/gentoo-mirror/gentoo.git priority: -1000 eclass-overrides: sam_c volatile: False sync-git-verify-commit-signature: yes sync-git-clone-extra-opts: -b stable -c gc.reflogExpire=0 -c gc.reflogExpireUnreachable=0 -c gc.rerereresolved=0 -c gc.rerereunresolved=0 -c gc.pruneExpire=now crossdev location: /var/db/repos/crossdev masters: gentoo eclass-overrides: sam_c volatile: True emacs location: /var/db/repos/emacs sync-type: git sync-uri: https://github.com/gentoo-mirror/emacs.git masters: gentoo eclass-overrides: sam_c volatile: True kde location: /var/db/repos/kde sync-type: git sync-uri: https://github.com/gentoo-mirror/kde.git masters: gentoo eclass-overrides: sam_c volatile: True local location: /var/db/repos/local masters: gentoo eclass-overrides: sam_c volatile: True qt location: /var/db/repos/qt sync-type: git sync-uri: https://github.com/gentoo-mirror/qt.git masters: gentoo eclass-overrides: sam_c volatile: True sam_c location: /var/db/repos/sam_c sync-type: git sync-uri: https://github.com/gentoo-mirror/sam_c.git masters: gentoo eclass-overrides: sam_c volatile: True steam-overlay location: /var/db/repos/steam-overlay sync-type: git sync-uri: https://github.com/gentoo-mirror/steam-overlay.git masters: gentoo eclass-overrides: sam_c volatile: True test location: /var/db/repos/test masters: gentoo eclass-overrides: sam_c volatile: True ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="@FREE" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -pipe -march=native -fdiagnostics-color=always -frecord-gcc-switches -Wreturn-type" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php8.2/ext-active/ /etc/php/cgi-php8.2/ext-active/ /etc/php/cli-php8.2/ext-active/ /etc/php/fpm-php8.2/ext-active/ /etc/php/phpdbg-php8.2/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-O2 -pipe -march=native -fdiagnostics-color=always -frecord-gcc-switches -Wreturn-type -D_GLIBCXX_ASSERTIONS" DISTDIR="/var/cache/distfiles" EMERGE_DEFAULT_OPTS="--keep-going --with-bdeps=y --complete-graph --deep --dynamic-deps=n --changed-deps=n --usepkg-exclude sys-fs/zfs --usepkg-exclude sys-fs/zfs-kmod --usepkg=y --implicit-system-deps=n --jobs=4 --load-average 32" ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME" FCFLAGS="-O2 -pipe -march=native -fdiagnostics-color=always -frecord-gcc-switches -Wreturn-type" FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg cgroup clean-logs config-protect-if-modified distlocks fixlafiles ipc-sandbox mount-sandbox multilib-strict network-sandbox news parallel-fetch parallel-install pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms split-log strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe -march=native -fdiagnostics-color=always -frecord-gcc-switches -Wreturn-type" GENTOO_MIRRORS="http://mirror.bytemark.co.uk/gentoo/ http://www.mirrorservice.org/sites/distfiles.gentoo.org/ http://mirrors.soeasyto.com/distfiles.gentoo.org/" LANG="en_GB.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--defsym=__gentoo_check_ldflags__=0 -Wl,-z,pack-relative-relocs" LEX="reflex" LINGUAS="en en_GB" MAKEOPTS="-j32 -l32" PKGDIR="/var/cache/binpkgs" PORTAGE_BUNZIP2_COMMAND="lbunzip2" PORTAGE_COMPRESS="xz" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" RUSTFLAGS="-C target-cpu=native" SHELL="/bin/bash" USE="PIC X a52 aac acl acpi activities aes alsa amd64 avx avx2 bash-completion bluetooth branding bzip2 cairo caps cdda cdr clang cli crypt dbus declarative dist-kernel dri dts dvd dvdr emacs encode exif f16c filecaps firewalld flac fma3 fortran freetype gdbm gif gmp gpm graphite gtk gui hardened harfbuzz hunspell iconv icu ipv6 jit jpeg kde kdesu kwallet lcms libglvnd libnotify libtirpc llvm-libunwind lto mad mmx mmxext mng mp3 mp4 mpeg multilib ncurses nftables nls nptl ogg opengl openmp pam pango pclmul pcre pdf pgo pie pipewire plasma png policykit popcnt ppds pulseaudio qml qt5 rdrand readline screencast sdl seccomp semantic-desktop sha sound spell sse sse2 sse3 sse4_1 sse4_2 sse4a ssl ssp ssse3 startup-notification svg system-av1 system-binutils system-boost system-bootstrap system-cairo system-clang system-digest system-ffmpeg system-harfbuzz system-heimdal system-icu system-jpeg system-leveldb system-libevent system-libs system-libvpx system-libyaml system-llvm system-lz4 system-mitkrb5 system-sqlite system-ssl system-tbb system-uulib system-webp system-zlib systemd test-rust tiff truetype udev udisks unicode upower usb verify-sig vorbis vulkan wayland widgets x264 xattr xcb xft xml xtpax xv xvid zfs zlib zsh-completion" ABI_X86="32 64" ADA_TARGET="gnat_2021" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt rdrand sha sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="libinput" KERNEL="linux" L10N="en en-GB" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LLVM_TARGETS="X86 AArch64 AMDGPU ARM AVR BPF Hexagon Lanai MSP430 Mips NVPTX PowerPC RISCV Sparc SystemZ WebAssembly XCore" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-4 php8-0" POSTGRES_TARGETS="postgres12 postgres13" PYTHON_SINGLE_TARGET="python3_11" PYTHON_TARGETS="python3_10 pypy3 python3_11 python3_8 python3_9" QEMU_USER_TARGETS="aarch64 aarch64_be alpha armeb hppa m68k ppc ppc64 ppc64le sparc sparc64" RUBY_TARGETS="ruby31" USERLAND="GNU" VIDEO_CARDS="amdgpu radeonsi radeon" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq proto steal rawnat logmark ipmark dhcpmac delude chaos account" YACC="byacc" Unset: ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, RANLIB, READELF, SIZE, STRINGS, STRIP, YFLAGS
Fixed upstream in https://github.com/mysql/mysql-server/commit/2ff216c125f9281bd9dcffc279b827c88611bf6c. I filed my bug upstream as a security issue but they didn't comment on that aspect and this is fixed in mysql-8.0.33, so..
(In reply to Sam James from comment #2) > Fixed upstream in > https://github.com/mysql/mysql-server/commit/ > 2ff216c125f9281bd9dcffc279b827c88611bf6c. > > I filed my bug upstream as a security issue but they didn't comment on that > aspect and this is fixed in mysql-8.0.33, so.. Nobody's said this to me, but fwiw, looking at the Oracle CPU April 2023 release, it's possible this is CVE-2023-21962, CVE-2023-21940, or CVE-2023-21947.
