Date: 2011-10-27 21:12:19 +0200
From: @grobian
To: MonetDB5 devs <>
Version: 11.5.9 (Aug2011-SP3) [obsolete]
CC: @yzchang

Last updated: 2012-11-27 14:42:12 +0100

Comment 16491

Date: 2011-10-27 21:12:19 +0200
From: @grobian

Oct 27 20:31:53 vomac mserver5[91283]: [91283] detected buffer overflow
Oct 27 20:31:56 vomac ReportCrash[91285]: Formulating crash report for process mserver5[91283]
Process: mserver5 [91283]
Path: /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/bin/mserver5
Identifier: mserver5
Version: ??? (???)
Code Type: PPC (Native)
Parent Process: python2.7 [85933]

Date/Time: 2011-10-27 20:31:53.730 +0200
OS Version: Mac OS X 10.5.8 (9L31a)
Report Version: 6
Anonymous UUID: A7B69245-A140-45A6-AA70-780DF77B525C

Exception Type: EXC_CRASH (SIGABRT)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Crashed Thread: 3

Thread 0:
0 libSystem.B.dylib 0x905dad30 read + 8
1 libSystem.B.dylib 0x90624090 _sread + 44
2 libSystem.B.dylib 0x90623ffc __srefill + 376
3 libSystem.B.dylib 0x90623d78 fgets + 124
4 libstream.2.dylib 0x0008ba14 bstream_next + 388
5 libmonetdb5.8.dylib 0x00a5acb4 MCreadClient + 388
6 libmonetdb5.8.dylib 0x00a70180 MALreader + 96
7 libmonetdb5.8.dylib 0x00a6ef1c runScenarioBody + 284
8 libmonetdb5.8.dylib 0x00a6f1d0 runScenario + 64
9 libmonetdb5.8.dylib 0x00a70404 MSserveClient + 244
10 mserver5 0x00003ad4 main + 3556
11 mserver5 0x00002990 start + 64

Thread 1:
0 libSystem.B.dylib 0x9063dc14 select$DARWIN_EXTSN + 12
1 libmonetdb5.8.dylib 0x01273544 SERVERlistenThread + 372

Thread 2:
0 libSystem.B.dylib 0x9063dc14 select$DARWIN_EXTSN + 12
1 libbat.4.dylib 0x014aaa98 MT_sleep_ms + 104
2 lib_sql.bundle 0x073f5e14 store_manager + 116
3 libSystem.B.dylib 0x9061bf70 _pthread_start + 316

Thread 3 Crashed:
0 libSystem.B.dylib 0x906e42ac __semwait_signal_nocancel + 8
1 libSystem.B.dylib 0x906e3d78 nanosleep$NOCANCEL$UNIX2003 + 176
2 libSystem.B.dylib 0x906dcfdc usleep$NOCANCEL$UNIX2003 + 68
3 libSystem.B.dylib 0x906f6b9c __abort + 88
4 libSystem.B.dylib 0x906b4238 __chk_fail + 116
5 libSystem.B.dylib 0x90695110 __strcat_chk + 64
6 lib_sql.bundle 0x073b58dc table_element + 1452
7 lib_sql.bundle 0x073b6994 rel_create_table + 724
8 lib_sql.bundle 0x073b746c rel_schemas + 828
9 lib_sql.bundle 0x07320b3c sql_symbol2stmt + 76
10 lib_sql.bundle 0x07305ed8 SQLparser + 2424
11 libmonetdb5.8.dylib 0x00a6ef70 runScenarioBody + 368
12 libmonetdb5.8.dylib 0x00a6f1d0 runScenario + 64
13 libmonetdb5.8.dylib 0x00a70404 MSserveClient + 244
14 libSystem.B.dylib 0x9061bf70 _pthread_start + 316
Thread 3 crashed with PPC Thread State 32:
srr0: 0x906e42ac srr1: 0x0200f030 dar: 0x00041000 dsisr: 0x42000000
r0: 0x000001a7 r1: 0xf03048a0 r2: 0xa00fd3c0 r3: 0x0000003c
r4: 0x00000000 r5: 0x00000001 r6: 0x00000001 r7: 0x00000000
r8: 0x00989680 r9: 0x00989680 r10: 0x0000800c r11: 0xa01017fc
r12: 0x906e3cc8 r13: 0x00000000 r14: 0x00000000 r15: 0x00000000
r16: 0x00000000 r17: 0x00000000 r18: 0x00000000 r19: 0xa00fc498
r20: 0x00000001 r21: 0x074263f4 r22: 0xa00fc498 r23: 0x0244b688
r24: 0x0742640c r25: 0x0743bebc r26: 0x0729c2f8 r27: 0x0296ae08
r28: 0x0244b808 r29: 0xf0304938 r30: 0x00000000 r31: 0x906e3cdc
cr: 0x48082448 xer: 0x00000000 lr: 0x906e3d7c ctr: 0x906e3cc8
vrsave: 0x00000000

Binary Images:
0x1000 - 0x4ff3 +mserver5 ??? (???) <64ab849dfb533c2ebc3e1b93b0ac5df3> /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/bin/mserver5
0xe000 - 0xeffe +lib_sphinx.bundle ??? (???) /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/lib/monetdb5/lib_sphinx.bundle
0x15000 - 0x26ff3 +libmapi.3.dylib ??? (???) <8a89436a149f38cfba23a94b4892b6f8> /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/lib/libmapi.3.dylib
0x43000 - 0x73ff2 +libreadline.6.dylib ??? (???) /Volumes/Scratch/gentoo/lib/libreadline.6.dylib
0x86000 - 0x90ffe +libstream.2.dylib ??? (???) /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/lib/libstream.2.dylib
0x94000 - 0xa4ff9 +libbz2.1.dylib ??? (???) /Volumes/Scratch/gentoo/lib/libbz2.1.dylib
0xa7000 - 0xd7fff +libpcre.0.dylib ??? (???) /Volumes/scratch/gentoo/lib/libpcre.0.dylib
0xeb000 - 0x13bff3 +libcurl.4.dylib ??? (???) <7e5a720dce933d5fd7e43420db89ff32> /Volumes/Scratch/gentoo/usr/lib/libcurl.4.dylib
0x147000 - 0x15bfff +libz.1.dylib ??? (???) /Volumes/Scratch/gentoo/lib/libz.1.dylib
0x15f000 - 0x16aff7 +libgcc_s.1.dylib ??? (???) <9b7348fc3e4a756e442af0f88b67f1bb> /Volumes/Scratch/gentoo/usr/lib/gcc/powerpc-apple-darwin9/4.2.1/libgcc_s.1.dylib
0x174000 - 0x17aff3 +lib_geom.bundle ??? (???) <82825c36a5fc30e98315995df0bd7f4d> /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/lib/monetdb5/lib_geom.bundle
0x1ab000 - 0x32cffb +libxml2.2.dylib ??? (???) <9201b6682c6a5a4fd27be19188b715f5> /Volumes/Scratch/gentoo/usr/lib/libxml2.2.dylib
0x356000 - 0x437ff7 +libiconv.2.dylib ??? (???) <08fb79206d003511b7cf48e604343557> /Volumes/Scratch/gentoo/lib/libiconv.2.dylib
0x441000 - 0x48affb +libssl.1.0.0.dylib ??? (???) /Volumes/Scratch/gentoo/usr/lib/libssl.1.0.0.dylib
0x4a0000 - 0x5e2ffb +libcrypto.1.0.0.dylib ??? (???) /Volumes/Scratch/gentoo/usr/lib/libcrypto.1.0.0.dylib
0x641000 - 0x683ff3 +libncurses.5.dylib ??? (???) <707a5e99b27e1bd558a77f2237115834> /Volumes/Scratch/gentoo/lib/libncurses.5.dylib
0x6a5000 - 0x6baff3 +libgeos_c.1.dylib ??? (???) /Volumes/Scratch/gentoo/usr/lib/libgeos_c.1.dylib
0x6c6000 - 0x6cefff +libsphinxclient-0.0.1.dylib ??? (???) <4b2bce3a56373279a669312b9ebf5d75> /Volumes/Scratch/gentoo/usr/lib/libsphinxclient-0.0.1.dylib
0xa4e000 - 0x13d9fff +libmonetdb5.8.dylib ??? (???) <3ad8ef039b743d87848f30ebac3ec17f> /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/lib/libmonetdb5.8.dylib
0x149c000 - 0x1e6bff3 +libbat.4.dylib ??? (???) <95ad4f3267f93d198617c88690159f35> /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/lib/libbat.4.dylib
0x6f00000 - 0x7024ffb +libgeos-3.2.2.dylib ??? (???) <153f3172dc7688cf3048be194f6f19ba> /Volumes/Scratch/gentoo/usr/lib/libgeos-3.2.2.dylib
0x70d6000 - 0x7173ff7 +libstdc++.6.dylib ??? (???) <6508b3616ed55d549fb775de7f97de48> /Volumes/scratch/gentoo/usr/lib/gcc/powerpc-apple-darwin9/4.2.1/libstdc++.6.dylib
0x7300000 - 0x7439fff +lib_sql.bundle ??? (???) /Volumes/Scratch/monet/GNU-Darwin-powerpc-444ccffd7751/install/lib/monetdb5/lib_sql.bundle
0x8fe00000 - 0x8fe30c23 dyld 97.1 (???) <89a0055b0e7ea2db881b73c6e63bc774> /usr/lib/dyld
0x905d9000 - 0x90779fe3 libSystem.B.dylib ??? (???) <7dc28e19e1aac16b29cbd7c5d9ce9638> /usr/lib/libSystem.B.dylib
0x90b58000 - 0x90b5dff6 libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
0xffff8000 - 0xffff9703 libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib

Comment 16571

Date: 2011-11-22 15:21:00 +0100
From: @grobian

This happens for test:
sql/test/BugTracker-2010/huge_nr_of_columns.Bug-2609

Comment 16572

Date: 2011-11-22 17:26:23 +0100
From: @grobian

Changeset f07428e6c155 made by Fabian Groffen fabian@cwi.nl in the MonetDB repo, refers to this bug.

For complete details, see http//devmonetdborg/hg/MonetDB?cmd=changeset;node=f07428e6c155

Changeset description:

table_constraint_name: avoid potential buffer overflow

strncpy does not add \0 if it doesn't fit.  strncat doesn't work
properly on Darwin9, so avoid using it to avoid a buffer overflow here
as well.  Bug #2914.

Comment 16828

Date: 2012-01-26 15:32:04 +0100
From: @sjoerdmullender

The Dec2011 version has been release, so declaring this bug as FIXED.

Comment 18089

Date: 2012-11-27 14:42:12 +0100
From: @yzchang

Already covered by test sql/test/BugTracker-2010/huge_nr_of_columns.Bug-2609