[MDEV-39813] ST_GeomFromGeoJSON does not control recursion depth - Jira

XML

Word

Printable

Bug Category:
Can result in hang or crash
Release Note Summary:

Hide
ST_GeomFromGeoJSON in processing its JSON object did not check the depth of processing and could potentially overrun memory. The depth of 32 is now enforced for MariaDB versions < 12.3, after which the depth is limited by the operating system stack size.

Show
ST_GeomFromGeoJSON in processing its JSON object did not check the depth of processing and could potentially overrun memory. The depth of 32 is now enforced for MariaDB versions < 12.3, after which the depth is limited by the operating system stack size.
Sprint:
Q3/2026 Server Maintenance, Q3/2026 Server Development

SELECT ST_GeomFromGeoJSON(

  concat(

    repeat('{"type":"GeometryCollection","geometries":[', 2000),

    '{"type":"Point","coordinates":[0,0]}',

    repeat(']}', 2000)

));

is duplicated by

MDEV-40789 Large variety of stacks and stack looping on GIS/JSON based SELECT w/ different CS/ES outcomes

relates to

MDEV-28404 JSON functions don't respect KILL QUERY / max_statement_time limit / recusion depth #2

MDEV-32854 Make JSON DEPTH unlimited

MDEV-39981 Different order of JSON items causes different results

MDEV-41062 MariaDB Server stack overflow when ST_GeomFromWKB() parses a deeply nested GeometryCollection inside a stored procedure

Estimated:

0.9h

Remaining:

Logged:

2d 2h 40m

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.