Scalar function causes database crash.

[yanghy233]

Bug Report

Please answer these questions before submitting your issue. Thanks!

1. Minimal reproduce step (Required)

1. schema.

create table `t0`
(
    `vkey` integer,
    `pkey` integer,
    `c0`   integer
);

insert into `t0`
values (1, 2, 3);

2. sql statement.

select *
from `t0`
where (nullif(
    3 ^ 10 & (abs(-50)) ,
    round(case when (((`t0`.`c0`) >= 1) or null) then 91 else 86 end)
    )) in (select `vkey` from `t0` where false);

2. What did you expect to see? (Required)

MySQL and TIDB have different execution results in the above case.

The normal result in MySQL 8:

mysql> select *
    -> from `t0`
    -> where (nullif(
    ->     3 ^ 10 & (abs(-50)) ,
    ->     round(case when (((`t0`.`c0`) >= 1) or null) then 91 else 86 end)
    ->     )) in (select `vkey` from `t0` where false);
Empty set (0.00 sec)

TiDB should also return empty result, but failed.

3. What did you see instead (Required)

In TiDB v8.1.1:

MySQL [test]> select *
    -> from `t0`
    -> where (nullif(
    ->     3 ^ 10 & (abs(-50)) ,
    ->     round(case when (((`t0`.`c0`) >= 1) or null) then 91 else 86 end)
    ->     )) in (select `vkey` from `t0` where false);
ERROR 1105 (HY000): interface conversion: expression.Expression is *expression.ScalarFunction, not *expression.Column

TiDB crash when execute the same SQL statement.

4. What is your TiDB version? (Required)

tidb v8.1.1

[yanghy233]

/label affects-8.1