MonetDB server crashes in `bin_find_smallest_column`

[fuboat]

Describe the bug MonetDB server crashes in bin_find_smallest_column.

To Reproduce

SELECT var_samp ( '12' ) OVER ( ORDER BY CAST ( ( CASE WHEN ( 99 ) THEN COUNT ( * ) ELSE CASE WHEN 1 THEN ( FALSE ) END END ) AS BIGINT ) );

Backtrace of the Crash

#0 0x7fb8fa8b4ebf (bin_find_smallest_column+0x4f)
#1 0x7fb8fa8ad3e2 (exp_bin+0xff2)
#2 0x7fb8fa8bb289 (subrel_bin+0x5d69)
#3 0x7fb8fa8c34c9 (rel2bin_project+0x1f9)
#4 0x7fb8fa8b61dc (subrel_bin+0xcbc)
#5 0x7fb8fa8c34c9 (rel2bin_project+0x1f9)
#6 0x7fb8fa8b61dc (subrel_bin+0xcbc)
#7 0x7fb8fa8c34c9 (rel2bin_project+0x1f9)
#8 0x7fb8fa8b61dc (subrel_bin+0xcbc)
#9 0x7fb8fa8c34c9 (rel2bin_project+0x1f9)
#10 0x7fb8fa8b61dc (subrel_bin+0xcbc)
#11 0x7fb8fa8b53b9 (output_rel_bin+0xb9)
#12 0x7fb8fa901a59 (backend_dumpstmt_body+0x2c9)
#13 0x7fb8fa9016a2 (backend_dumpstmt+0x192)
#14 0x7fb8fa89d184 (SQLparser+0xf04)
#15 0x7fb8fa89ba0a (SQLengine_+0xa5a)
#16 0x7fb8fa8991fe (SQLengine+0x3e)
#17 0x7fb8fae1db2f (runScenario+0x6f)
#18 0x7fb8fae1ecfe (MSscheduleClient+0xb6e)
#19 0x7fb8faf626c2 (doChallenge+0x132)
#20 0x7fb8fbd7fb38 (thread_starter+0x318)
#21 0x7fb8fa790609 (start_thread+0xd9)
#22 0x7fb8fa6b3353 (clone+0x43)

Software versions

• MonetDB version number: v11.49.1 (Dec2023)
• OS and version: Ubuntu 20.04
• From docker image monetdb/monetdb:Dec2023 (or monetdb/dev-builds:default)

An example of steps to reproduce in docker container (write the poc into /tmp/test.sql first):

docker container rm monetdb_test -f
docker run -e MDB_DB_ADMIN_PASS=monetdb --name monetdb_test -itd monetdb/monetdb:Dec2023
docker exec monetdb_test bash -c 'echo -n -e "user=monetdb\npassword=monetdb\n" > /root/.monetdb'

sleep 10
cat /tmp/test.sql | timeout 5s docker exec -i monetdb_test mclient monetdb     # run test case

if docker exec monetdb_test bash -c "grep '[m]server5' /proc/*/cmdline -lR"; then
    echo "[INFO] Server normal."
else
    echo "[CRASH] Mserver5 process does NOT exist."
fi

It can also be reproduced on the docker image monetdb/dev-builds:default.

Issue labeling bug