Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-36582

a NULL function pointer dereference vulnerability occurring within the Item_func_or_sum::walk method defined in sql/item.h:5452.

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Critical
    • Resolution: Cannot Reproduce
    • 11.4.0
    • N/A
    • Optimizer
    • None
    • ubuntu20.04,x86
    • Not for Release Notes

    Description

      This is a NULL function pointer dereference vulnerability in MariaDB, occurring within the Item_func_or_sum::walk method defined in sql/item.h:5452. The crash is triggered when the processor function pointer passed to walk() is invalid (specifically, set to nullptr), yet it is invoked without validation. The call stack ends abruptly at 0x0, confirming a direct dereference of a null or corrupted function pointer.

      Attachments

        Activity

          People

            Unassigned Unassigned
            yx yx
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.