Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-35622

SEGV, ASAN use-after-poison when reading system table with less than expected number of columns

    XMLWordPrintable

Details

    • Can result in unexpected behaviour

    Description

      Splitted from the 10.x testcases in MDEV-35557. Tested at 10.5 bf7cfa2535618bfe9962c725555680e799fdcd18

      Example 1:

      ALTER TABLE mysql.servers DROP COLUMN Owner;
      		 
      INSERT INTO mysql.servers VALUES(0,0,0,0,0,0,0,0);
      		 
      FLUSH PRIVILEGES;

      Example 2:

      alter table mysql.plugin drop column dl;
      		 
      install soname "ha_example";

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-24193 UBSAN: sql/sql_acl.cc:9985:29: runtime error: member access within null pointer of type 'struct TABLE' , ASAN: use-after-poison in handle_grant_table

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          split from

          Bug - A problem which impairs or prevents the functions of the product. MDEV-35557 SIGSEGV in get_server_from_table_to_cache | servers_load, UBSAN null pointer passed as argument 1, which is declared to never be null

          • Major - Major loss of function.
          • Closed

          Activity

            People

              ycp Yuchen Pei
              ycp Yuchen Pei
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.