Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-33590

Possible access beyond array boundaries

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Minor
    • Resolution: Unresolved
    • 11.5(EOL)
    • None
    • None
    • None

    Description

      storage/innobase/fsp/fsp0fsp.cc
      It is possible that m_index is equal to m_old_xdes_pages.size()
      In this case we will reference array beyond its boundaries.
      >= should be used instead of >

        
      buf_block_t *search(uint32_t page_no)
      {
          uint32_t m_index= page_no >> srv_page_size_shift;
          if (m_index > m_old_xdes_pages.size())
            return nullptr;
          return m_old_xdes_pages[m_index];
      }
      

      Attachments

        Activity

          People

            Unassigned Unassigned
            yury.chaikou Yury Chaikou
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.