Bug 171170 – mysql-5.0.26 - mysqld crashes when dont specify a table name in grant statement

• Product: Gentoo Linux
• Status: RESOLVED TEST-REQUEST

[Description Damien 2007-03-16 16:31:36 UTC]

mysqld crashes if dont specify the table name correctly as:

GRANT ALL ON test_table TO 'testuser' IDENTIFIED BY 'testpassword';


Reproducible: Always

Steps to Reproduce:
1.Connect to the database.
2.Submit an invalid grant target definition.
3.Mysqld crashes.

Actual Results:  
Server Crashes

Expected Results:  
Server outputs error message

Example code to reproduce:

CREATE DATABASE IF NOT EXISTS test_db;

USE test_db;

CREATE TABLE test_table (
id INTEGER AUTO_INCREMENT PRIMARY KEY NOT NULL );

GRANT ALL ON test_table TO 'testuser' IDENTIFIED BY 'testpassword';


mysqld.err log file output:

mysqld got signal 11;
This could be because you hit a bug. It is also possible that this binary
or one of the libraries it was linked against is corrupt, improperly built,
or misconfigured. This error can also be caused by malfunctioning hardware.
We will try our best to scrape up some info that will hopefully help diagnose
the problem, but since we have already crashed, something is definitely wrong
and this may fail.

key_buffer_size=16777216
read_buffer_size=258048
max_used_connections=1
max_connections=100
threads_connected=1
It is possible that mysqld could use up to
key_buffer_size + (read_buffer_size + sort_buffer_size)*max_connections = 92783 K
bytes of memory
Hope that's ok; if not, decrease some variables in the equation.

thd=0x85e8c20
Attempting backtrace. You can use the following information to find out
where mysqld died. If you see no messages after this, something went
terribly wrong...
Cannot determine thread, fp=0xb6ae2af8, backtrace may not be correct.
Stack range sanity check OK, backtrace follows:
0x8172833
0x83ba900
0x83bb2d2
0x8200fa5
0x818b70c
0x818e696
0x818ec1b
0x818ff38
0x8190926
0xb7db54ab
0xb7bf21ee
New value of fp=(nil) failed sanity check, terminating stack trace!
Please read http://dev.mysql.com/doc/mysql/en/Using_stack_trace.html and follow instructions on how to resolve the stack trace. Resolved
stack trace is much more helpful in diagnosing the problem, so please do
resolve it
Trying to get some variables.
Some pointers may be invalid and cause the dump to abort...
thd->query at 0x85fa2d0 = GRANT ALL ON test_db TO 'testuser' IDENTIFIED BY
'testpassword'
thd->thread_id=9
The manual page at http://www.mysql.com/doc/en/Crashing.html contains
information that should help you find out what is causing the crash.

emerge --info:

Portage 2.1.2.2 (default-linux/x86/2006.1, gcc-4.1.1, glibc-2.5-r0, 2.6.19-gentoo-r5 i686)
=================================================================
System uname: 2.6.19-gentoo-r5 i686 AMD Athlon(tm) XP 2700+
Gentoo Base System release 1.12.9
Timestamp of tree: Thu, 15 Mar 2007 09:30:01 +0000
dev-java/java-config: 1.3.7, 2.0.31
dev-lang/python:     2.3.5-r3, 2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.14
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/php/apache1-php5/ext-active/ /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-O2 -march=athlon-xp -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://gentoo.blueyonder.co.uk ftp://mirrors.blueyonder.co.uk/mirrors/gentoo http://www.mirrorservice.org/sites/www.ibiblio.org/gentoo/ ftp://ftp.mirrorservice.org/sites/www.ibiblio.org/gentoo/"
LINGUAS="en_GB"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dnow 3dnowext 7zip X a52 aac ace acpi aio alias alsa amarok apache2 apm asf async bash-completion bitmap-fonts bluetooth branding bzip2 calendar cdaudio cddb cdinstall cdr cg cli colordiff compress cpio cracklib crypt css cups dio divx doc dri dvd ecc encode fat ffmpeg flash fortran gdbm gif glib glut gpm gs haskell hddtemp iconv imap ipsec irda isdnlog java java5 javascript jce john jpeg kde kdepim kdexdeltas kdm latex libg++ libwww logwatch mad maildir midi mmx mmxext mp3 mp4 mp4live mpeg mpeg2 mysql mysqli ncurses netboot nls nptl nptlonly nsplugin opengl pam pci pcre pdf pear-db perl php png posix ppds pppd python qt3support qt4 quicktime rar rdesktop readline reflection sdl session soap sockets sound sounds speech spell spl ssl standalone syslog tcpd tetex threads tidy truetype truetype-fonts type1-fonts unicode vorbis wifi win32codecs wireshark x86 xml xorg xv zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en_GB" USERLAND="GNU" VIDEO_CARDS="nvidia"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

[Comment 1 Jakub Moc (RETIRED) 2007-03-16 16:35:49 UTC]

Maybe you could post mysql version? Plus the backtrace is not useful at all, check here how to create a better one:

http://www.gentoo.org/proj/en/qa/backtraces.xml

[Comment 2 Damien 2007-03-16 20:38:53 UTC]

Sorry about the lack of info.  It is a x86 box with the latest stable mysql (which is mysql 5.0) on that arch. The mysqld deamon (started with init mysqld) crashes when an invalid 'database.table' definition is given.  I included the output from the mysqld.err log in the hope that it would give some incite into where the issue lies.  

Basically the problem seems to be (I guess) that when an invalid database.tablename is given to the grant statement (there is no table specified) the server segfaults due to an un-initialised pointer? This is reproduceable every time.  I have left the bug resolved until I can get you some more info if there is anything else?

[Comment 3 Damien 2007-03-19 09:55:33 UTC]

 $ mysql --version
mysql  Ver 14.12 Distrib 5.0.26, for pc-linux-gnu (i686) using readline 5.1

[Comment 4 Robin Johnson 2007-04-15 13:07:42 UTC]

please retest on 5.0.38.
If problem persists, file a bug with upstream.