This is an automated email from the ASF dual-hosted git repository.
morningman pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/master by this push:
new f467595c1df [fix](orc)fix coredump because rewriteLeaves function
heap-use-after-free. (#61138)
f467595c1df is described below
commit f467595c1df9ba677af0bdab5cc93bdaaea57950
Author: daidai <[email protected]>
AuthorDate: Sat Mar 21 10:53:11 2026 +0800
[fix](orc)fix coredump because rewriteLeaves function heap-use-after-free.
(#61138)
### What problem does this PR solve?
Related PR: https://github.com/apache/doris-thirdparty/pull/383
Problem Summary:
fix coredump:
```
#0 0x5561f1d46f12 in operator delete(void*, unsigned long)
(/mnt/disk2/tengjianping/doris-master/output/be/lib/doris_be+0x50ae4f12)
#1 0x55622c94b454 in
std::__new_allocator<std::shared_ptr<orc::ExpressionTree>>::deallocate(std::shared_ptr<orc::ExpressionTree>*,
unsigned long)
(/mnt/disk2/tengjianping/doris-master/output/be/lib/doris_be+0x8b6e9454)
#2 0x55622c94b41e in
std::_Deque_base<std::shared_ptr<orc::ExpressionTree>,
std::allocator<std::shared_ptr<orc::ExpressionTree>>>::_M_deallocate_node(std::shared_ptr<orc::ExpressionTree>*)
(/mnt/disk2/tengjianping/doris-master/output/be/lib/doris_be+0x8b6e941e)
#3 0x55622c950681 in std::deque<std::shared_ptr<orc::ExpressionTree>,
std::allocator<std::shared_ptr<orc::ExpressionTree>>>::_M_pop_front_aux()
(/mnt/disk2/tengjianping/doris-master/output/be/lib/doris_be+0x8b6ee681)
#4 0x55622c94868e in std::deque<std::shared_ptr<orc::ExpressionTree>,
std::allocator<std::shared_ptr<orc::ExpressionTree>>>::pop_front()
(/mnt/disk2/tengjianping/doris-master/output/be/lib/doris_be+0x8b6e668e)
#5 0x55622c947d79 in
orc::rewriteLeaves(std::shared_ptr<orc::ExpressionTree>, unsigned long*)
SearchArgument.cc
#6 0x55622c947809 in orc::SearchArgumentBuilderImpl::build()
(/mnt/disk2/tengjianping/doris-master/output/be/lib/doris_be+0x8b6e5809)
#7 0x5562195209a6 in
doris::vectorized::OrcReader::_init_search_argument(std::vector<std::shared_ptr<doris::vectorized::VExpr>,
std::allocator<std::shared_ptr<doris::vectorized::VExpr>>> const&)
/mnt/disk2/tengjianping/doris-master/be/src/vec/exec/format/orc/vorc_reader.cpp:1072:27
#8 0x556219527175 in
doris::vectorized::OrcReader::set_fill_columns(std::unordered_map<std::__cxx11::basic_string<char,
std::char_traits<char>, std::allocator<char>>,
std::tuple<std::__cxx11::basic_string<char, std::char_traits<char>,
std::allocator<char>>, doris::SlotDescriptor const*>,
std::hash<std::__cxx11::basic_string<char,
```
---
contrib/apache-orc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/contrib/apache-orc b/contrib/apache-orc
index c0a2043f071..be0f1b73a7a 160000
--- a/contrib/apache-orc
+++ b/contrib/apache-orc
@@ -1 +1 @@
-Subproject commit c0a2043f07115c4209abd49fba88ac1c7c084a12
+Subproject commit be0f1b73a7aeb78824a03e0dcb692c50a176d513
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
