a null pointer dereference in the sortlength function within filesort.cc at line 2183

A segmentation fault in MariaDB occurs due to a null pointer dereference in the sortlength function within filesort.cc at line 2183. Specifically, the server attempts to access a method on sortorder->item without ensuring it is a valid object, relying on item->type_handler()->is_packable() without a preceding null check. This crash is triggered during the execution of filesort() as part of an UPDATE query with an ORDER BY clause. A crafted SQL statement can exploit this flaw to cause a denial-of-service (DoS) condition by crashing the mariadbd process