mserver5 crash on SQL: SELECT * FROM SYS.ARGS WHERE FUNC_ID NOT IN (SELECT ID FROM SYS.FUNCTIONS) OR FUNC_ID NOT IN (SELECT * FROM SYS.FUNCTIONS)

[monetdb-team]

Date: 2014-03-28 17:15:59 +0100
From: Martin van Dinther <<martin.van.dinther>>
To: SQL devs <>
Version: 11.17.9 (Jan2014)
CC: @njnes

Last updated: 2014-05-22 09:52:32 +0200

Comment 19714

Date: 2014-03-28 17:15:59 +0100
From: Martin van Dinther <<martin.van.dinther>>

User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:27.0) Gecko/20100101 Firefox/27.0
Build Identifier:

Execute following SQL query on a new demo database
SELECT * FROM SYS.ARGS WHERE FUNC_ID NOT IN (SELECT ID FROM SYS.FUNCTIONS) OR FUNC_ID NOT IN (SELECT * FROM SYS.FUNCTIONS)

Reproducible: Always

Steps to Reproduce:

1. start mserver5
2. start SQuirreL connecting to demo database
3. execute SQL query:
   SELECT * FROM SYS.ARGS
   WHERE FUNC_ID NOT IN (SELECT ID FROM SYS.FUNCTIONS)
   OR FUNC_ID NOT IN (SELECT * FROM SYS.FUNCTIONS)

Actual Results:

builtin opt gdk_dbpath = /ufs/dinther/MonetDBFebr2014/var/monetdb5/dbfarm/demo
builtin opt gdk_debug = 0
builtin opt gdk_vmtrim = no
builtin opt monet_prompt = >
builtin opt monet_daemon = no
builtin opt mapi_port = 50000
builtin opt mapi_open = false
builtin opt mapi_autosense = false
builtin opt sql_optimizer = default_pipe
builtin opt sql_debug = 0
MonetDB 5 server v11.17.9 "Jan2014"
Serving database 'demo', using 8 threads
Compiled for x86_64-unknown-linux-gnu/64bit with 64bit OIDs dynamically linked
Found 7.733 GiB available main-memory.
Copyright (c) 1993-July 2008 CWI.
Copyright (c) August 2008-2014 MonetDB B.V., all rights reserved
Visit http://www.monetdb.org/ for further information
Listening for connection requests on mapi:monetdb://127.0.0.1:50000/
MonetDB/GIS module loaded
MonetDB/SQL module loaded

./start_mserver5: line 1: 11671 Segmentation fault ./MonetDBFebr2014/bin/mserver5 -d10

Expected Results:

No server crash, but a SQL syntax error as the construction
FUNC_ID NOT IN (SELECT * FROM SYS.FUNCTIONS)
is not valid.

SELECT * FROM SYS.ARGS WHERE FUNC_ID NOT IN (SELECT ID FROM SYS.FUNCTIONS)
works fine (reports 0 rows).

SELECT * FROM SYS.ARGS WHERE FUNC_ID NOT IN (SELECT * FROM SYS.FUNCTIONS)
also executes (many rows returned), but should have given an SQL syntax error (I will report that as a separate bug)

Only the combination of the two where-clauses with an OR lets the server crash.

Comment 19717

Date: 2014-03-29 14:20:02 +0100
From: @njnes

fixed crash added missing select operator

Comment 19720

Date: 2014-03-29 14:23:54 +0100
From: MonetDB Mercurial Repository <>

Changeset c5338ccd7803 made by Niels Nes niels@cwi.nl in the MonetDB repo, refers to this bug.

For complete details, see http//devmonetdborg/hg/MonetDB?cmd=changeset;node=c5338ccd7803

Changeset description:

fixed bugs 3458, 3461 and 3462

3461 added missing select
3462 check number of columns