Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-5689

ExtractValue(xml, 'substring(/x,/y)') crashes

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 5.3.12, 5.5.33a, 10.0.6
    • 10.0.10
    • None
    • None

    Description

      This query crashes the server:

      SELECT ExtractValue('<a><b>abc</b><c>2</c><d>1</d></a>','substring(/a/b,..)');

      Notice '..' in the 'position' argument to XPath substring() function,
      which obviously goes above the root XML element.

      If I change the position argument to something inside the XML tree,
      it works fine:

      mysql> SELECT ExtractValue('<a><b>abc</b><c>2</c><d>1</d></a>','substring(/a/b,/a/c)');
      		 
      +--------------------------------------------------------------------------+
      		 
      | ExtractValue('<a><b>abc</b><c>2</c><d>1</d></a>','substring(/a/b,/a/c)') |
      		 
      +--------------------------------------------------------------------------+
      		 
      | bc                                                                       |
      		 
      +--------------------------------------------------------------------------+
      		 
      1 row in set (0.00 sec)

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. MDEV-5652 5.5.36 merge

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-5709 ExtractValue() with XPath variable references returns wrong result

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            serg Sergei Golubchik added a comment -

            5.5 crash is already fixed, so this patch is considered for 10.0 only

            serg Sergei Golubchik added a comment - 5.5 crash is already fixed, so this patch is considered for 10.0 only
            bar Alexander Barkov added a comment -

            Pushed into 10.0

            bar Alexander Barkov added a comment - Pushed into 10.0

            People

              bar Alexander Barkov
              bar Alexander Barkov
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.