Details
Description
do_merge() (sql/item_jsonfunc.c) has recursive calls but do not have check_stack_overrun
Attachments
Issue Links
- relates to
-
MDEV-33209 Stack overflow in main.json_debug_nonembedded due to incorrect debug injection
-
- Closed
-
Patch:
10.3: https://github.com/MariaDB/server/commit/dbe39f14fede0f5fbe0ce7470ae4fde21767842c
10.6: https://github.com/MariaDB/server/commit/0ea221e12bb4b298b728cd0e0f2651173cbe2347
10.9:
https://github.com/MariaDB/server/commit/5ad14ab272e7770a52f3cf20369e7ab7b14b51d6