diff options
author | Thirunarayanan Balathandayuthapani <thiru@mariadb.com> | 2022-08-16 15:31:49 +0530 |
---|---|---|
committer | Thirunarayanan Balathandayuthapani <thiru@mariadb.com> | 2022-08-22 16:29:46 +0530 |
commit | c7f8cfc9e733517cff4aaa6f6eaca625a3afc098 (patch) | |
tree | 878bce5055a6682893b6f5ac234960154c7ee3c9 /mysql-test | |
parent | fd0cd4801a00c61adb5ab6cbefcf360467a02f20 (diff) | |
download | mariadb-git-c7f8cfc9e733517cff4aaa6f6eaca625a3afc098.tar.gz |
MDEV-27700 ASAN: Heap_use_after_free in btr_search_drop_page_hash_index()
Reason:
=======
Race condition between btr_search_drop_hash_index() and
btr_search_lazy_free(). One thread does resizing of buffer pool
and clears the ahi on all pages in the buffer pool, frees the
index and table while removing the last reference. At the same time,
other thread access index->heap in btr_search_drop_hash_index().
Solution:
=========
Acquire the respective ahi latch before checking index->freed()
btr_search_drop_page_hash_index(): Added new parameter to indicate
that drop ahi entries only if the index is marked as freed
btr_search_check_marked_free_index(): Acquire all ahi latches and
return true if the index was freed
Diffstat (limited to 'mysql-test')
0 files changed, 0 insertions, 0 deletions