Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-20097

potential use-after-free

    XMLWordPrintable

    Details

      Description

      But was revealed while I was working on https://jira.mariadb.org/browse/MDEV-19471

      buf is an alias for a merge_buf[i] and thus both must have the same value.

      Here is where it's violated:
      https://github.com/MariaDB/server/blob/f616e2b97fec3a8105c70cd72e80d6ef57f460c7/storage/innobase/row/row0merge.cc#L1918

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              kevg Eugene Kosov
              Reporter:
              kevg Eugene Kosov
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: