Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
1.2.1, 1.3.0
-
None
Description
In readwritesplit.c:
The GWBUF querybuf routeQuery passes to route_single_stmt is made contiguous inside the latter. If that really is made, then the original buffer is freed (inside gwbuf_make_contiguous). When routeQuery calls gwbuf_free there will be a double free.