[MDEV-3908] crash in multi-table delete and mdl Created: 2012-12-02 Updated: 2013-01-18 Resolved: 2013-01-17 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | None |
| Affects Version/s: | 5.5.28a |
| Fix Version/s: | 5.5.29 |
| Type: | Bug | Priority: | Blocker |
| Reporter: | Sergei Golubchik | Assignee: | Sergei Golubchik |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Issue Links: |
|
||||||||
| Description |
|
A statement like
will crash the server when the client disconnects. Crash happens when trying to free THD::st_transaction::mem_root, because mem_root->free->next pointer is corrupted. It's corrupted in here
|
| Comments |
| Comment by Sergei Golubchik [ 2012-12-03 ] |
|
when resolved: send an email to packagers@ with the CVE it and a link to the patch |
| Comment by Huzaifa Sidhpurwala [ 2012-12-04 ] |
|
Any idea if 5.1 is also affected by this flaw? |
| Comment by Sergei Golubchik [ 2012-12-04 ] |
|
It is not affected- 5.1 does not have the MDL subsystem (which was first implemented in 5.5) |
| Comment by Sergei Golubchik [ 2013-01-17 ] |
|
verified that mysql-5.5.29 contains a fix. |