diff options
author | Marko Mäkelä <marko.makela@mariadb.com> | 2019-08-12 18:29:16 +0300 |
---|---|---|
committer | Marko Mäkelä <marko.makela@mariadb.com> | 2019-08-12 19:37:24 +0300 |
commit | ae1d17f52de045b37e0894e1e6684a911a43696c (patch) | |
tree | a52208d9022a897c512de22b2a0a0fafe09dde07 /mysql-test/suite/binlog_encryption/multisource.result | |
parent | 97bbac8ec61f1903f713eb1ed5330b3a60c11924 (diff) | |
download | mariadb-git-ae1d17f52de045b37e0894e1e6684a911a43696c.tar.gz |
MDEV-20316 InnoDB writes uninitialised tail of XID buffer
Starting with commit 210855ce5d6803f41d672d75be3334726f52a9df
Valgrind became aware that the unused tail of the buffer that
is returned by thd_get_xid() is actually uninitialized.
The problem should exist already in MySQL 5.0. I was able to
repeat it on MariaDB Server 5.5 with some additional instrumentation.
InnoDB is allocating 128+4+4 bytes for the XID and the lengths of
its components, even when the XID is shorter than 64+64 bytes.
In MariaDB Server 10.3, while running the test main.xa_binlog,
in the xid_t::set() that is called by sql_yacc.yy, the 128-byte data
buffer was uninitialized according to Valgrind, and only the first bytes
were initialized. When the xid_t::data was copied to
thd.transaction.xid_state.xid.data, it happened so that the entire
target buffer was considered initialized. With MariaDB Server 10.4 since
the said commit, Valgrind will correctly be detect the tail of the buffer
as uninitialized.
The impact of this bug is as follows:
(1) InnoDB will write unnecessarily much redo log for XA PREPARE.
(2) InnoDB will write garbage bytes to the redo log and undo log pages.
(3) The garbage should be 'harmless', because on recovery, only the
actual payload of the XID will be used, based on the written length.
trx_rseg_write_wsrep_checkpoint(), trx_undo_write_xid(): Write only
the actually used length of xid->data to the data page, and
zero out the rest of the buffer by mlog_memset().
Diffstat (limited to 'mysql-test/suite/binlog_encryption/multisource.result')
0 files changed, 0 insertions, 0 deletions