Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-39750

ExtractValue does not control recursion depth

    XMLWordPrintable

Details

    • Can result in hang or crash
    • Q3/2026 Server Maintenance

    Description

      SELECT ExtractValue('<a/>', REPEAT('(', 100000));
      

      Reported by Chris Anley at NCC Group

      Attachments

        Activity

          People

            holyfoot Alexey Botchkov
            serg Sergei Golubchik
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - 0d
                0d
                Remaining:
                Remaining Estimate - 0d
                0d
                Logged:
                Time Spent - 3h 50m
                3h 50m

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.