Skip to content

segfault: DictionaryStructure.cpp:247: DB::DictionaryStructure::getAttribute #22143

@akuzm

Description

@akuzm

https://clickhouse-test-reports.s3.yandex.net/21640/7b494c63b89c6f4d20efbdf7f9b0f0cc4aaff41c/fuzzer_asan/report.html#fail1

SELECT '127.0.0.0/24' = dictGetString('database_for_dict.dict_ipv4_trie', 'prefixprefixprefixprefix', tuple(IPv4StringToNum('127.0.0.0127.0.0.0')))




2021.03.12 19:29:17.664455 [ 87 ] {} <Trace> BaseDaemon: Received signal 11
2021.03.12 19:29:17.834110 [ 179148 ] {} <Fatal> BaseDaemon: ########################################
2021.03.12 19:29:17.834333 [ 179148 ] {} <Fatal> BaseDaemon: (version 21.4.1.6236, build id: F23437794601738D7AE1301E325BFEBCDE4AE928) (from thread 92) (query_id: 95db735a-5ce6-4386-b3be-6a1c21b8dea8) Received signal Segmentation fault (11)
2021.03.12 19:29:17.834468 [ 179148 ] {} <Fatal> BaseDaemon: Address: 0x28 Access: read. Address not mapped to object.
2021.03.12 19:29:17.834587 [ 179148 ] {} <Fatal> BaseDaemon: Stack trace: 0x1d335ab9 0x11653af0 0x1166d670 0xf9d5ca5 0xf9d586c 0xfaac497 0xfaaaec1 0xfaac3c6 0xfaad5d4 0x1dde27a4 0x1dde6171 0x1e7727b6 0x1e77dc43 0x1e77823c 0x1e7882a9 0x1e74167f 0x1e712fe2 0x1e72c6a9 0x1e7379ba 0x1e2d6c9c 0x1e2cbf1d 0x1e2c01b0 0x1e2bc8c1 0x1ec8a323 0x1ec86823 0x1e200081 0x1f0cf396 0x1f0cc50f 0x2049c8cd
2021.03.12 19:29:17.897358 [ 179148 ] {} <Fatal> BaseDaemon: 3.1. inlined from ./obj-x86_64-linux-gnu/../contrib/libcxx/include/vector:1559: std::__1::vector<DB::DictionaryAttribute, std::__1::allocator<DB::DictionaryAttribute> >::operator[](unsigned long) const
2021.03.12 19:29:17.897473 [ 179148 ] {} <Fatal> BaseDaemon: 3. ../src/Dictionaries/DictionaryStructure.cpp:247: DB::DictionaryStructure::getAttribute(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) const @ 0x1d335ab9 in /workspace/clickhouse
2021.03.12 19:29:20.977535 [ 179148 ] {} <Fatal> BaseDaemon: 4. DB::FunctionDictGetNoType<(DB::DictionaryGetFunctionType)0>::getReturnTypeImpl(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&) const @ 0x11653af0 in /workspace/clickhouse
2021.03.12 19:29:24.050129 [ 179148 ] {} <Fatal> BaseDaemon: 5. DB::FunctionDictGetImpl<DB::DataTypeString, DB::NameDictGetString, (DB::DictionaryGetFunctionType)0>::executeImpl(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0x1166d670 in /workspace/clickhouse
2021.03.12 19:29:27.135451 [ 179148 ] {} <Fatal> BaseDaemon: 6. DB::IFunction::executeImplDryRun(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0xf9d5ca5 in /workspace/clickhouse
2021.03.12 19:29:30.183503 [ 179148 ] {} <Fatal> BaseDaemon: 7. DB::DefaultExecutable::executeDryRun(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0xf9d586c in /workspace/clickhouse
2021.03.12 19:29:33.248997 [ 179148 ] {} <Fatal> BaseDaemon: 8. DB::ExecutableFunctionAdaptor::executeWithoutLowCardinalityColumns(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0xfaac497 in /workspace/clickhouse
2021.03.12 19:29:36.325514 [ 179148 ] {} <Fatal> BaseDaemon: 9. DB::ExecutableFunctionAdaptor::defaultImplementationForConstantArguments(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0xfaaaec1 in /workspace/clickhouse

Metadata

Metadata

Assignees

Labels

bugConfirmed user-visible misbehaviour in official releasefuzzProblem found by one of the fuzzers

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions