Details
-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 10.0.1
-
Fix Version/s: 10.0.2
-
Component/s: None
-
Labels:None
Description
There's a clearly incorrect code in storage/innobase/fts/fts0fts.cc in MariaDB 10.0.1 tarball. On line 5348 it has:
/* Swap the entries. */
|
memcpy(&temp, last, sizeof(temp));
|
memcpy(last, prev, sizeof(*last));
|
memcpy(prev, &temp, sizeof(prev));
|
The last statement doesn't copy full fts_savepoint_t struct from temp to *prev, because the last parameter should be sizeof(*prev).