Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-39213

json range syntax crash

    XMLWordPrintable

Details

    • Can result in hang or crash
    • Hide
      JSON search functions, JSON_EXISTS, JSON_EXTRACT, JSON_VALUE, JSON_QUERY, JSON_CONTAINS, JSON_CONTAINS_PATH, JSON_ARRAY_APPEND, JSON_ARRAY_INSERT, JSON_LENGTH, JSON_INSERT, JSON_REMOVE, JSON_KEYS, could result in a overwrite of memory resulting in a crash.
      Show
      JSON search functions, JSON_EXISTS, JSON_EXTRACT, JSON_VALUE, JSON_QUERY, JSON_CONTAINS, JSON_CONTAINS_PATH, JSON_ARRAY_APPEND, JSON_ARRAY_INSERT, JSON_LENGTH, JSON_INSERT, JSON_REMOVE, JSON_KEYS, could result in a overwrite of memory resulting in a crash.
    • Q2/2026 Server Development

    Description

      SELECT JSON_EXISTS(CONCAT('[', REPEAT('[', 4000), 'Y', REPEAT(']', 4000), ', 1]'), '$[100]');

      Reported by Akshay Jain.

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. MDEV-35548 UBSAN: runtime error: index -1 out of bounds for type 'json_path_step_t[32]' (aka 'struct st_json_path_step_t[32]')

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-39276 Assertion `0' failed in json_find_path or Assertion `cur_step->type & JSON_PATH_ARRAY'

          • Major - Major loss of function.
          • In Review

          Activity

            People

              rucha174 Rucha Deodhar
              serg Sergei Golubchik
              Rucha Deodhar Rucha Deodhar
              Votes:
              1 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.