[MDEV-22818] Server crash on corrupted ROW_FORMAT=COMPRESSED page - Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Major
Resolution: Fixed
Affects Version/s: 10.2.2, 10.3.0, 10.4.0, 10.5.0
Fix Version/s: 10.5.4, 10.2.33, 10.3.24, 10.4.14
Component/s: Storage Engine - InnoDB
Labels:

Description

After the function page_zip_fields_decode() has assigned index=NULL to signal a corruption of a ROW_FORMAT=COMPRESSED page, it could dereference that pointer before returning.

In MariaDB Server 10.2, this only affects SPATIAL INDEX. Starting with the 10.3 version, this affects all indexes, due to additions that were made to this function in ~~MDEV-11369~~.

There should be no user-visible impact of this. Also, until ~~MDEV-13542~~ has been fixed, there are many other cases where we could crash due to a corrupted page.

Attachments

Activity

People

Assignee:: Marko Mäkelä

Reporter:: Marko Mäkelä

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 2020-06-06 06:27

Updated:: 2020-06-06 06:39

Resolved:: 2020-06-06 06:39

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.