/* Copyright (c) 2005, 2019, Oracle and/or its affiliates. All rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License, version 2.0, as published by the Free Software Foundation. This program is also distributed with certain software (including but not limited to OpenSSL) that is licensed under separate terms, as designated in a particular file or component or in included license documentation. The authors of MySQL hereby grant you an additional permission to link the program and your derivative works with the separately licensed software that they have included with MySQL. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License, version 2.0, for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA */ #include "sql/sql_cursor.h" #include #include #include #include "memory_debugging.h" #include "my_alloc.h" #include "my_base.h" #include "my_compiler.h" #include "my_dbug.h" #include "my_inttypes.h" #include "my_sys.h" #include "mysql/components/services/psi_statement_bits.h" #include "mysql_com.h" #include "sql/debug_sync.h" #include "sql/field.h" #include "sql/handler.h" #include "sql/item.h" #include "sql/parse_tree_node_base.h" #include "sql/protocol.h" #include "sql/query_options.h" #include "sql/query_result.h" #include "sql/sql_digest_stream.h" #include "sql/sql_lex.h" #include "sql/sql_list.h" #include "sql/sql_parse.h" // mysql_execute_command #include "sql/sql_tmp_table.h" // tmp tables #include "sql/sql_union.h" // Query_result_union #include "sql/system_variables.h" #include "sql/table.h" /**************************************************************************** Declarations. ****************************************************************************/ /** Materialized_cursor -- an insensitive materialized server-side cursor. The result set of this cursor is saved in a temporary table at open. The cursor itself is simply an interface for the handler of the temporary table. */ class Materialized_cursor final : public Server_side_cursor { /* A fake unit to supply to Query_result_send when fetching */ SELECT_LEX_UNIT fake_unit; TABLE *table; List item_list; ulong fetch_limit; ulong fetch_count; bool is_rnd_inited; public: Materialized_cursor(Query_result *result, TABLE *table); int send_result_set_metadata(THD *thd, List &send_result_set_metadata); bool is_open() const override { return table != 0; } int open(THD *, JOIN *) override; bool fetch(ulong num_rows) override; void close() override; ~Materialized_cursor() override; }; /** Query_result_materialize -- a mediator between a cursor query and the protocol. In case we were not able to open a non-materialzed cursor, it creates an internal temporary memory table, and inserts all rows into it. If the table is in the Heap engine and if it reaches maximum Heap table size, it's converted to a disk-based temporary table. Later this table is used to create a Materialized_cursor. */ class Query_result_materialize final : public Query_result_union { Query_result *result; /**< the result object of the caller (PS or SP) */ public: Materialized_cursor *materialized_cursor; Query_result_materialize(Query_result *result_arg) : Query_result_union(), result(result_arg), materialized_cursor(0) {} bool send_result_set_metadata(THD *thd, List &list, uint flags) override; void cleanup(THD *) override { table = NULL; // Pass table object to Materialized_cursor } }; /**************************************************************************/ /** Attempt to open a materialized cursor. @param thd thread handle @param[in] result result class of the caller used as a destination for the rows fetched from the cursor @param[out] pcursor a pointer to store a pointer to cursor in @return Error status @retval false -- the query has been successfully executed; in this case pcursor may or may not contain a pointer to an open cursor. @retval true -- an error, 'pcursor' has been left intact. */ bool mysql_open_cursor(THD *thd, Query_result *result, Server_side_cursor **pcursor) { sql_digest_state *parent_digest; PSI_statement_locker *parent_locker; Query_result *save_result; Query_result_materialize *result_materialize; LEX *lex = thd->lex; if (!(result_materialize = new (thd->mem_root) Query_result_materialize(result))) return true; save_result = lex->result; lex->result = result_materialize; parent_digest = thd->m_digest; parent_locker = thd->m_statement_psi; thd->m_digest = NULL; thd->m_statement_psi = NULL; bool rc = mysql_execute_command(thd); thd->m_digest = parent_digest; DEBUG_SYNC(thd, "after_table_close"); thd->m_statement_psi = parent_locker; lex->result = save_result; /* Possible options here: - a materialized cursor is open. In this case rc is 0 and result_materialize->materialized is not NULL - an error occurred during materialization. result_materialize->materialized_cursor is not NULL, but rc != 0 - successful completion of mysql_execute_command without a cursor: rc is 0, result_materialize->materialized_cursor is NULL. This is possible if some command writes directly to the network, bypassing Query_result mechanism. An example of such command is SHOW VARIABLES or SHOW STATUS. */ if (rc) { if (result_materialize->materialized_cursor) { /* Rollback metadata in the client-server protocol. */ result_materialize->abort_result_set(thd); delete result_materialize->materialized_cursor; } goto end; } if (result_materialize->materialized_cursor) { Materialized_cursor *materialized_cursor = result_materialize->materialized_cursor; /* NOTE: close_thread_tables() has been called in mysql_execute_command(), so all tables except from the cursor temporary table have been closed. */ if ((rc = materialized_cursor->open(thd, nullptr))) { delete materialized_cursor; goto end; } *pcursor = materialized_cursor; } end: destroy(result_materialize); return rc; } /**************************************************************************** Server_side_cursor ****************************************************************************/ Server_side_cursor::~Server_side_cursor() {} void Server_side_cursor::operator delete(void *ptr, size_t size MY_ATTRIBUTE((unused))) { DBUG_TRACE; Server_side_cursor *cursor = (Server_side_cursor *)ptr; /* If this cursor has never been opened, mem_root is empty. Otherwise, mem_root is allocated on itself. In this case, it's important to move it out before freeing, to avoid writing into freed memory during the free process. */ MEM_ROOT own_root = std::move(*cursor->m_arena.mem_root); TRASH(ptr, size); free_root(&own_root, MYF(0)); } /*************************************************************************** Materialized_cursor ****************************************************************************/ Materialized_cursor::Materialized_cursor(Query_result *result_arg, TABLE *table_arg) : Server_side_cursor(&table_arg->s->mem_root, result_arg), fake_unit(CTX_NONE), table(table_arg), fetch_limit(0), fetch_count(0), is_rnd_inited(0) {} /** Preserve the original metadata to be sent to the client. Initiate sending of the original metadata to the client (call Protocol::send_result_set_metadata()). @param thd Thread identifier. @param send_result_set_metadata List of fields that would be sent. */ int Materialized_cursor::send_result_set_metadata( THD *thd, List &send_result_set_metadata) { Query_arena backup_arena; int rc; List_iterator_fast it_org(send_result_set_metadata); List_iterator_fast it_dst(item_list); Item *item_org; Item *item_dst; thd->swap_query_arena(m_arena, &backup_arena); if ((rc = table->fill_item_list(&item_list))) goto end; DBUG_ASSERT(send_result_set_metadata.elements == item_list.elements); /* Unless we preserve the original metadata, it will be lost, since new fields describe columns of the temporary table. Allocate a copy of the name for safety only. Currently items with original names are always kept in memory, but in case this changes a memory leak may be hard to notice. */ while ((item_dst = it_dst++, item_org = it_org++)) { Send_field send_field; Item_ident *ident = static_cast(item_dst); item_org->make_field(&send_field); ident->db_name = thd->mem_strdup(send_field.db_name); ident->table_name = thd->mem_strdup(send_field.table_name); } /* Original metadata result set should be sent here. After mysql_execute_command() is finished, item_list can not be used for sending metadata, because it references closed table. */ rc = result->send_result_set_metadata(thd, item_list, Protocol::SEND_NUM_ROWS); end: thd->swap_query_arena(backup_arena, &m_arena); /* Check for thd->is_error() in case of OOM */ return rc || thd->is_error(); } int Materialized_cursor::open(THD *thd, JOIN *) { int rc; Query_arena backup_arena; thd->swap_query_arena(m_arena, &backup_arena); /* Create a list of fields and start sequential scan. */ rc = result->prepare(thd, item_list, &fake_unit); rc = !rc && table->file->ha_rnd_init(true); is_rnd_inited = !rc; thd->swap_query_arena(backup_arena, &m_arena); /* Commit or rollback metadata in the client-server protocol. */ if (!rc) { thd->server_status |= SERVER_STATUS_CURSOR_EXISTS; result->send_eof(thd); } else { result->abort_result_set(thd); } return rc; } /** Fetch up to the given number of rows from a materialized cursor. Precondition: the cursor is open. If the cursor points after the last row, the fetch will automatically close the cursor and not send any data (except the 'EOF' packet with SERVER_STATUS_LAST_ROW_SENT). This is an extra round trip and probably should be improved to return SERVER_STATUS_LAST_ROW_SENT along with the last row. */ bool Materialized_cursor::fetch(ulong num_rows) { THD *thd = table->in_use; int res = 0; result->begin_dataset(); for (fetch_limit += num_rows; fetch_count < fetch_limit; fetch_count++) { if ((res = table->file->ha_rnd_next(table->record[0]))) break; /* Send data only if the read was successful. */ /* If network write failed (i.e. due to a closed socked), the error has already been set. Return true if the error is set. */ if (result->send_data(thd, item_list)) return true; } switch (res) { case 0: thd->server_status |= SERVER_STATUS_CURSOR_EXISTS; result->send_eof(thd); break; case HA_ERR_END_OF_FILE: thd->server_status |= SERVER_STATUS_LAST_ROW_SENT; result->send_eof(thd); close(); break; default: table->file->print_error(res, MYF(0)); close(); return true; } return false; } void Materialized_cursor::close() { /* Free item_list items */ m_arena.free_items(); if (is_rnd_inited) (void)table->file->ha_rnd_end(); /* We need to grab table->mem_root to prevent free_tmp_table from freeing: the cursor object was allocated in this memory. The mem_root will be freed in Materialized_cursor::operator delete. */ m_arena.mem_root = new (&table->s->mem_root) MEM_ROOT(std::move(table->s->mem_root)); free_tmp_table(table->in_use, table); table = 0; } Materialized_cursor::~Materialized_cursor() { if (is_open()) close(); } /*************************************************************************** Query_result_materialize ****************************************************************************/ bool Query_result_materialize::send_result_set_metadata(THD *thd, List &list, uint) { DBUG_ASSERT(table == 0); if (create_result_table(thd, unit->get_field_list(), false, thd->variables.option_bits | TMP_TABLE_ALL_COLUMNS, "", false, true)) return true; materialized_cursor = new (&table->s->mem_root) Materialized_cursor(result, table); if (!materialized_cursor) { free_tmp_table(table->in_use, table); table = 0; return true; } if (materialized_cursor->send_result_set_metadata(thd, list)) { delete materialized_cursor; table = 0; materialized_cursor = 0; return true; } /* close_thread_tables() will be called in mysql_execute_command() which will close all tables except the cursor temporary table. Hence set the orig_table in the field definition to NULL. */ for (Field **fld = this->table->field; *fld; fld++) (*fld)->orig_table = NULL; return false; }