Crash on disjunction with LIMIT (sqlsmith)

[monetdb-team]

Date: 2017-05-18 15:55:22 +0200
From: @mlkersten
To: SQL devs <>
Version: -- development
CC: akkaran046, @njnes

Last updated: 2018-12-31 07:04:54 +0100

Comment 25343

Date: 2017-05-18 15:55:22 +0200
From: @mlkersten

User-Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0
Build Identifier:

Removing the LIMIT clause makes it work

Reproducible: Always

Steps to Reproduce:

select
subq_0.c3 as c2
from
(select
sample_0.proj4text as c3,
sample_0.auth_name as c7
from
sys.spatial_ref_sys as sample_0
where true
limit 134) as subq_0
where (true)
or ((select pc from sys.tracelog)
is not NULL);

Actual Results:

0 0x00007ffff496d765 in raise () from /lib64/libc.so.6
1 0x00007ffff496f36a in abort () from /lib64/libc.so.6
2 0x00007ffff4965f97 in __assert_fail_base () from /lib64/libc.so.6
3 0x00007ffff4966042 in __assert_fail () from /lib64/libc.so.6
4 0x00007ffff76b975f in BATgroup_internal (groups=0x7fffd441c728,
extents=0x7fffd441c730, histo=0x7fffd441c738, b=0x7fffb0003140, s=0x0,
g=0x7fffb4008960, e=0x0, h=0x0, subsorted=0)
at /export/scratch1/home/mk/default//package/gdk/gdk_group.c:480
5 0x00007ffff76cf1bf in BATgroup (groups=0x7fffd441c728, extents=0x7fffd441c730,
histo=0x7fffd441c738, b=0x7fffb0003140, s=0x0, g=0x7fffb4008960, e=0x0, h=0x0)
at /export/scratch1/home/mk/default//package/gdk/gdk_group.c:1101
6 0x00007ffff7a9df24 in GRPsubgroup5 (ngid=0x1cc88a0, next=0x1cc88c0,
nhis=0x1cc88e0, bid=0x1cc8820, sid=0x0, gid=0x1cc8840, eid=0x0, hid=0x0)
at /export/scratch1/home/mk/default//package/monetdb5/modules/kernel/group.c:40
7 0x00007ffff7a9e16f in GRPsubgroup2 (ngid=0x1cc88a0, next=0x1cc88c0,
nhis=0x1cc88e0, bid=0x1cc8820, gid=0x1cc8840)
at /export/scratch1/home/mk/default//package/monetdb5/modules/kernel/group.c:75
8 0x00007ffff79f38ca in malCommandCall (stk=0x1cc7ec0, pci=0x1cc5fb0)
at /export/scratch1/home/mk/default//package/monetdb5/mal/mal_interpreter.c:93
9 0x00007ffff79f6585 in runMALsequence (cntxt=0x7fffef926020, mb=0x1cb5300,
startpc=37, stoppc=38, stk=0x1cc7ec0, env=0x0, pcicaller=0x0)
at /export/scratch1/home/mk/default//package/monetdb5/mal/mal_interpreter.c:668
10 0x00007ffff79fb869 in DFLOWworker (T=0x7ffff7daa680 <workers+384>)
at /export/scratch1/home/mk/default//package/monetdb5/mal/mal_dataflow.c:403
11 0x00007ffff4d025ca in start_thread () from /lib64/libpthread.so.0
12 0x00007ffff4a3c0ed in clone () from /lib64/libc.so.6

Comment 25363

Date: 2017-05-31 17:00:10 +0200
From: MonetDB Mercurial Repository <>

Changeset 99f4886d5b45 made by Niels Nes niels@cwi.nl in the MonetDB repo, refers to this bug.

For complete details, see http//devmonetdborg/hg/MonetDB?cmd=changeset;node=99f4886d5b45

Changeset description:

add test for bug #6322

Comment 25374

Date: 2017-06-07 13:09:47 +0200
From: @njnes

fixed a bug in the push select optimizer

Comment 25403

Date: 2017-06-29 16:52:55 +0200
From: MonetDB Mercurial Repository <>

Changeset 0592a67375ad made by Martin van Dinther martin.van.dinther@monetdbsolutions.com in the MonetDB repo, refers to this bug.

For complete details, see http//devmonetdborg/hg/MonetDB?cmd=changeset;node=0592a67375ad

Changeset description:

Exclude test push_subslice.Bug-6322 when it does not HAVE_GEOM
 as the test query depends on sys.spatial_ref_sys (which is created in 40_geom.sql)

Comment 25892

Date: 2017-11-16 15:31:23 +0100
From: MonetDB Mercurial Repository <>

Changeset eb7ad3a6176d made by Martin van Dinther martin.van.dinther@monetdbsolutions.com in the MonetDB repo, refers to this bug.

For complete details, see https//devmonetdborg/hg/MonetDB?cmd=changeset;node=eb7ad3a6176d

Changeset description:

Corrected file name of limit.bug-6322.sql into limit.Bug-6322.sql as defined in All file
Added dependency condition HAVE_GEOM
Reduced output to 14 rows (was 134)
Added missing test output files

Comment 26762

Date: 2018-12-31 07:04:54 +0100
From: martin garix <>

google.com