Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
10.0.1
-
None
-
None
Description
There's a clearly incorrect code in storage/innobase/fts/fts0fts.cc in MariaDB 10.0.1 tarball. On line 5348 it has:
/* Swap the entries. */
|
memcpy(&temp, last, sizeof(temp));
|
memcpy(last, prev, sizeof(*last));
|
memcpy(prev, &temp, sizeof(prev));
|
The last statement doesn't copy full fts_savepoint_t struct from temp to *prev, because the last parameter should be sizeof(*prev).