Details
-
Bug
-
Status: Closed (View Workflow)
-
Blocker
-
Resolution: Fixed
-
10.6, 10.11, 11.4, 11.8
-
Can result in hang or crash
-
malformed spatial data could've caused a crash inside InnoDB
-
Q1/2026 Server Maintenance
Description
source include/have_innodb.inc;
|
|
|
create table t1 ( |
id int auto_increment primary key, |
geom geometry not null, |
spatial index (geom) |
) engine=innodb;
|
|
|
SET @wkb = CONCAT( |
UNHEX('00000000'), # SRID = 0 (4 bytes) |
UNHEX('01'), # byte_order = 1 (little-endian, 1 byte) |
UNHEX('07000000'), # type = 7 (GeometryCollection, 4 bytes) |
UNHEX('FF000000') # n_items = 255 (claims 255 geometries, but NONE follow) |
);
|
select hex(@wkb); |
insert t1 (geom) values (@wkb); |
drop table t1; |
Reported by Pavel Kohout, Aisle Research