Details
-
Bug
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
Description
Dropping a table whose backtick-quoted name contains embedded single quotes or escape sequences causes mariadbd to segfault instead of returning a normal error.
Version
MariaDB Columnstore 25.10.4 (stable-23.10)
Reproducer
DROP TABLE {{mcol-'a'}}; |
Variant with escape sequences:
DROP TABLE IF EXISTS {{MCOL-'\n\r\t'}}; |
Expected
Server returns an error (e.g. table does not exist) and stays alive.
Actual
ERROR 2013 (HY000): Lost connection to server during query
|
dmesg confirms a real segfault:
mariadbd[1473162]: segfault at 40 ip 00007793656b992d sp ... error 4 in libstdc++.so.6.0.33
|