Details
-
Bug
-
Status: Open (View Workflow)
-
Critical
-
Resolution: Unresolved
-
11.8
-
None
-
None
Description
Take a look at the following code in my_copy():
while ((Count=my_read(from_file, buff, sizeof(buff), MyFlags)) != 0) |
{
|
if (Count == (uint) -1 || |
my_write(to_file,buff,Count,MYF(MyFlags | MY_NABP)))
|
goto err; |
}
|
That (uint) is wrong, because Count is of size_t type. That causes infinite loop. The code is checked in 11.8, but I am quite sure it exists in earlier versions.