2074327 - SAP IQ crashes at hos_memmgr::FreeHosMem() while processing RTL

• The IQ server crashed with a stack trace due to a memory corruption at the hos_memmgr::FreeHosMem() call while processing RTL:

**************************************************
***   Sybase IQ Abort:
***      From:  hos_mem.cxx:243
***      PID: 25034768
***      Exception Location: 0x12807df00
***      Error ID: 517,  Exception Type: hos_memexception
***      Thread: 65537  (TID: 54, Original TID: 54)
***      Error #: 0,  O/S Error #: 0
**************************************************

• It then caught signal 11 while handling an abort:

**  While handling one abort, caught signal 11, program abort on thread 75817 (TID 14)

• The top calls in the stack trace are as follows:

 .hos_memmgr::FreeHosMem()
 .operator delete()
 .hqm_buffer::~hqm_buffer()
 .hqm_field::~hqm_field()
 .hqm_field::__dftdt()
 .fp_swap_rnd()
 .hqm_query::CompleteCursor()
 .hqm_query::Cancel()
 .hqm_cpm::ReturnQuery()
 .db_cursorADtoIQ::~db_cursorADtoIQ()
 .db_sqlinsert::Shutdown()
 .db_sqlinsert::~db_sqlinsert()
 .db_sqlinsert::db_sqlinsertTerminator()
  ...
 .db_sqlinsert::SExecute()
 .db_sqlinsert::Execute()
 .st_command::DoCmdThroughResourceGate()
 .st_iqdml::Insert()
 .UIQDML_Insert+0x48()
  ...
 .InsertFromHost()
 .dbi_insert()
  ...

• Right before the IQ server aborted, there was an error in the in the .iqmsg file which pointed to a memory corruption:

 Insert Started.
 #rs_ut_bh_chart_36_1
 Exception Thrown from hdb_flds.cxx:360, Err# 14, tid 54 origtid 54
    O/S Err#: 0, ErrID: 1027 (hdb_dbexception); SQLCode: -1000179, SQLState: 'QDB79', Severity: 14
 [20839]: The column length (209) must be [if variable sized, between 0 and] 4.
 Exception Thrown from hdb_flds.cxx:360, Err# 14, tid 54 origtid 54
   O/S Err#: 0, ErrID: 1027 (hdb_dbexception); SQLCode: -1000179, SQLState: 'QDB79', Severity: 14
 [20839]: The column length (209) must be [if variable sized, between 0 and] 4.

 IQ Internal Error Detected:  Memory Corruption
     Idx: 0  Addr: 18e25f7210  Size: 8  File: hqm_buffer.cxx  Line: 84  Thread: 54  IsArray: 0
     Usage: hqm_buffer::hqm_buffer

 Next Element In List:
     Idx: 0  Addr: 18e2854710  Size: 48  File: hqm_field.cxx  Line: 442  Thread: 54  IsArray: 0
     Usage: hqm_field::CreateBuf

 Previous Element In List:
     Idx: 0  Addr: 18e285b870  Size: 48  File: db_sqlins.cxx  Line: 8888  Thread: 54  IsArray: 0
     Usage: db_sqlinsert::_dri

     Failure(s):   _end bad data: 0x0x2000004fffebe

• SAP IQ 15.x any release
• SAP Replication Server 15.7

 RepServer, CR768164, 768164, hos_memmgr::FreeHosMem, .operator delete, .hqm_buffer::~hqm_buffer , KBA , BC-SYB-IQ , Sybase IQ , BC-SYB-REP , Sybase Replication Server (standalone) , Bug Filed