Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-40329

Binary_string::qs_append(char): Assertion `str_length + (uint32) (1) <= Alloced_length' failed in AsText

    XMLWordPrintable

Details

    • Can result in hang or crash

    Description

      eval SELECT ST_AsText(x'000000000$(repeat('107000000010000000', 200))10100000000000000000000000000000000000000') as oops;

      Reported by Sylvie Mayer

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-40328 ASAN error on malformed WKB multipolygon

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          links to

          Web Link CVE-2026-85746

          Activity

            People

              serg Sergei Golubchik
              serg Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 0d
                  0d
                  Remaining:
                  Remaining Estimate - 0d
                  0d
                  Logged:
                  Time Spent - 0.25d
                  0.25d

                  Git Integration

                    Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.