MariaDB-10.3 Core Dumped. Something has changed related to security reason ?

[bryn1u85]

Hey guys,

Im a bit suprised becouse after installed and during running mariadb server im getting "Segmentation fault (core dumped)". I have never see before. Mysql and Mariadb always worked withoud secadm rules. The second thing is when i run it second time, the MariaDB looks like is being started. I check secadm rules on git, seems mysql doesn't need additionaly secadm rule.

root@mysql: # service mysql-server start
Installing MariaDB/MySQL system tables in '/var/db/mysql' ...
Segmentation fault (core dumped)
Installation of system tables failed!  Examine the logs in
/var/db/mysql for more information.
(.......)
Please check all of the above before submitting a bug report
at http://mariadb.org/jira
/usr/local/etc/rc.d/mysql-server: WARNING: failed precmd routine for mysql
root@mysql:# service mysql-server start
Starting mysql.

Output from host dmesg.

root@HardenedBSD:/home/bryn1u # dmesg
[259928] pid 49429 (mysqld), uid 0: exited on signal 11 (core dumped)
[260628] pid 18942 (mysqld), uid 88: exited on signal 11
[261129] pid 45028 (mysqld), uid 0: exited on signal 11 (core dumped)
[261132] pid 84145 (mysqld), uid 88: exited on signal 11

MariaDB is closed in jail. 

I would be grateful for any tip. Thank you !

[bryn1u85]

Hey Bernard,

No. I have been used many times. I used it first time after switch LibreSSL to OpenSSL. I build new server after that changes. Now im trying to install MariaDB-10.3 and got this issue first time. 
Bernard i have a one question more.If i good remamber there were mysql80-server as a package available. Now i see only in ports. What happen ?

I was trying to install mysql80-server from ports but im getting some issue:

root@mysql:/usr/ports/databases/mysql80-server # make install clean
===>  License GPLv2 accepted by the user
===>   mysql80-server-8.0.11_1 depends on file: /usr/local/sbin/pkg - found
===> Fetching all distfiles required by mysql80-server-8.0.11_1 for building
===>  Extracting for mysql80-server-8.0.11_1
=> SHA256 Checksum OK for mysql-boost-8.0.11.tar.gz.
/usr/ports/databases/mysql80-server/work/mysql-8.0.11/sql/sql_hints.yy.cc
/usr/ports/databases/mysql80-server/work/mysql-8.0.11/sql/sql_hints.yy.h
===>  Patching for mysql80-server-8.0.11_1
===>  Applying FreeBSD patches for mysql80-server-8.0.11_1
===>   mysql80-server-8.0.11_1 depends on executable: bison - found
===>   mysql80-server-8.0.11_1 depends on file: /usr/local/bin/cmake - found
===>   mysql80-server-8.0.11_1 depends on file: /usr/local/lib/libcrypto.so.9 - found
===>   mysql80-server-8.0.11_1 depends on shared library: libevent.so - found (/usr/local/lib/libevent.so)
===>   mysql80-server-8.0.11_1 depends on shared library: libicutu.so - found (/usr/local/lib/libicutu.so)
===>   mysql80-server-8.0.11_1 depends on shared library: liblz4.so - found (/usr/local/lib/liblz4.so)
===>   mysql80-server-8.0.11_1 depends on shared library: libre2.so - found (/usr/local/lib/libre2.so)
===>   mysql80-server-8.0.11_1 depends on shared library: libprotobuf.so - found (/usr/local/lib/libprotobuf.so)
===>   mysql80-server-8.0.11_1 depends on shared library: libedit.so.0 - found (/usr/local/lib/libedit.so.0)
===>   mysql80-server-8.0.11_1 depends on shared library: libmysqlclient.so.21 - not found
===>  License GPLv2 accepted by the user
===>   mysql80-client-8.0.11_1 depends on file: /usr/local/sbin/pkg - found
===> Fetching all distfiles required by mysql80-client-8.0.11_1 for building
===>  Extracting for mysql80-client-8.0.11_1
=> SHA256 Checksum OK for mysql-boost-8.0.11.tar.gz.
/usr/ports/databases/mysql80-client/work/mysql-8.0.11/sql/sql_hints.yy.cc
/usr/ports/databases/mysql80-client/work/mysql-8.0.11/sql/sql_hints.yy.h
===>  Patching for mysql80-client-8.0.11_1
===>  Applying FreeBSD patches for mysql80-client-8.0.11_1
1 out of 3 hunks failed--saving rejects to utilities/CMakeLists.txt.rej
=> FreeBSD patch patch-utilities_CMakeLists.txt failed to apply cleanly.
=> Patch(es)  patch-CMakeLists.txt patch-client_CMakeLists.txt patch-cmake_os_DragonFly.cmake patch-cmake_ssl.cmake patch-cmd-line-utils_libedit_chartype.h patch-cmd-line-utils_libedit_vi.c patch-include_CMakeLists.txt patch-include_my__compare.h patch-include_myisam.h patch-libmysql_CMakeLists.txt patch-man_CMakeLists.txt patch-mysys__ssl_my__default.cc patch-mysys__ssl_my__md5.cc patch-plugin_x_client_xconnection__impl.cc patch-scripts_CMakeLists.txt patch-share_CMakeLists.txt patch-sql-common_client.cc patch-sql_auth_sha2__password__common.cc patch-sql_mysqld.cc patch-sql_sys__vars.cc patch-storage_myisam_mi__dynrec.cc patch-support-files_CMakeLists.txt applied cleanly.
*** Error code 1
Stop.
make[1]: stopped in /usr/ports/databases/mysql80-client
*** Error code 1
Stop.
make: stopped in /usr/ports/databases/mysql80-server

niedz., 8 lip 2018 o 16:36 Bernard Spil <ber...@bachfreund.nl> napisał(a):

I must mark that port as BROKEN. I assume this is the first time you've
tried 10.3? There's an open PR for this and an upstream issue. (not HBSD
related)

https://bugs.freebsd.org/229219
https://jira.mariadb.org/browse/MDEV-16495

[Bernard Spil]

On 2018-07-08 17:07, bryn1u85 wrote:

> Hey Bernard,
>
> No. I have been used many times. I used it first time after switch
> LibreSSL to OpenSSL. I build new server after that changes. Now im
> trying to install MariaDB-10.3 and got this issue first time.
> Bernard i have a one question more.If i good remamber there were
> mysql80-server as a package available. Now i see only in ports. What
> happen ?
>

Fix has been committed to ports tree. Please see if that works for you
and report any issues.
Issues for MySQL you can just open a PR, mmokhi is pretty responsive.

Cheers, Bernard.

[bryn1u85]

Hey Bernard,

Installation by the ports has beed done well. There is still problem run mariadb103-server:

[9650] pid 94529 (mysqld), uid 0: exited on signal 11 (core dumped)
[9664] pid 1295 (cc1plus), uid 0: exited on signal 11 (core dumped)
[9701] pid 53963 (mysqld), uid 0: exited on signal 11 (core dumped)
[9743] pid 59801 (mysqld), uid 0: exited on signal 11 (core dumped)
[9754] pid 92748 (mysqld), uid 88: exited on signal 11
[9934] pid 61712 (mysqld), uid 88: exited on signal 11
[9945] pid 77299 (mysqld), uid 0: exited on signal 11 (core dumped)
[9969] pid 62688 (mysqld), uid 0: exited on signal 11 (core dumped)

My steps:

Clearly Jail builded with hbsd-update -nr

pkg install mariadb103-server

service mysql-server start

and output from host:

[9650] pid 94529 (mysqld), uid 0: exited on signal 11 (core dumped)
[9664] pid 1295 (cc1plus), uid 0: exited on signal 11 (core dumped)
[9701] pid 53963 (mysqld), uid 0: exited on signal 11 (core dumped)
[9743] pid 59801 (mysqld), uid 0: exited on signal 11 (core dumped)
[9754] pid 92748 (mysqld), uid 88: exited on signal 11
[9934] pid 61712 (mysqld), uid 88: exited on signal 11
[9945] pid 77299 (mysqld), uid 0: exited on signal 11 (core dumped)
[9969] pid 62688 (mysqld), uid 0: exited on signal 11 (core dumped)

So for now it doesn't work (for me) :((

[bryn1u85]

@Bernard Spil

 One more thing. I tried install mariadb102 and works without any issues.

[Piotr Kubaj]

It works for me.

root@db:~ # uname -a
FreeBSD XXX 11.2-STABLE-HBSD FreeBSD 11.2-STABLE-HBSD #35 8e8fa1d2359(hardened/11-stable/master): Wed Jul 4 11:56:50 CEST 2018 toor@XXX:/usr/obj/usr/src/sys/SERVER amd64
root@db:~ # mysql -e "show variables where Variable_name='version'"
+---------------+----------------+
| Variable_name | Value |
+---------------+----------------+
| version | 10.3.8-MariaDB |
+---------------+----------------+

On 18-07-17 23:37:39, bryn1u85 wrote:
>@Bernard Spil <ber...@bachfreund.nl>

--
________________________________________
/ A narcissist is someone better looking \
| than you are. |
| |
\ -- Gore Vidal /
----------------------------------------
\ ^__^
\ (oo)\_______
(__)\ )\/\
||----w |
|| ||

[bryn1u85]

It's weird becouse all versions of MariaDB works for me, expect 103 where 103 was marked as a broken and still dosen't work for me :(( . Im going to investigation deeper.

[Oliver Pinter]

A truss or ktr output would be great. 

[bryn1u85]

Hey,

@Bernard Spil

The same issue. I just installed from ports mariadb103. I put output from truss in attachment. Might help.

[bryn1u85]

I've "resolved" issue.

There is a way to bypass that issue. In make config i set GSSAPI_NONE instead GSSAPI_BASE. After compiling MariaDB103 works as a charm. I even compiled with LibreSSL and works too :)

I don't know how to affects but it's working for me at least now.