Crash in optimizeLabelScan #2968
Description
Hi, the following query will trigger a crash in RedisGraph v2.10.9 and RedisGraph master branch on Redis core 7.0.9.
GRAPH.QUERY graphname "MATCH (reltype6)<-[:reltype8{}]->(node_1)-[:reltype8*0]->(node_0:label4) WHERE [ node_0 , node_1 , TRUE , NULL , node_1 , node_1.prop8 ] > 725 AND NULL = [ ] DETACH DELETE node_0 RETURN node_0.prop9 ORDER BY node_0 ASCENDING, node_1.prop6 DESC, node_0.prop8 ASC LIMIT 0"
Partial Redis crash log:
3830830:M 18 Mar 2023 18:05:32.990 # Redis 7.0.9 crashed by signal: 11, si_code: 1
3830830:M 18 Mar 2023 18:05:32.990 # Accessing address: (nil)
3830830:M 18 Mar 2023 18:05:32.990 # Crashed running the instruction at: 0x7ffff6459fe4
------ STACK TRACE ------
EIP:
/repo/RedisGraph_noinst/src/redisgraph.so(AlgebraicExpression_Dest+0x4)[0x7ffff6459fe4]
Backtrace:
/lib/x86_64-linux-gnu/libc.so.6(+0x42520)[0x7ffff7cea520]
/repo/RedisGraph_noinst/src/redisgraph.so(AlgebraicExpression_Dest+0x4)[0x7ffff6459fe4]
/repo/RedisGraph_noinst/src/redisgraph.so(optimizeLabelScan+0x18d)[0x7ffff6474e1d]
/repo/RedisGraph_noinst/src/redisgraph.so(optimizePlan+0x25)[0x7ffff6474ed5]
/repo/RedisGraph_noinst/src/redisgraph.so(ExecutionPlan_PreparePlan+0xd)[0x7ffff6462fdd]
/repo/RedisGraph_noinst/src/redisgraph.so(+0x209dbe)[0x7ffff645ddbe]
/repo/RedisGraph_noinst/src/redisgraph.so(+0x25a68f)[0x7ffff64ae68f]
/lib/x86_64-linux-gnu/libc.so.6(+0x94b43)[0x7ffff7d3cb43]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x44)[0x7ffff7dcdbb4]
Thanks.