use of uninitialized memory in wsrep_rec_get_primary_key()
Bug #967134 reported by
Teemu Ollakka
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MySQL patches by Codership |
Fix Released
|
Medium
|
Teemu Ollakka | ||
5.1 |
Won't Fix
|
Undecided
|
Unassigned | ||
5.5 |
Fix Released
|
Medium
|
Teemu Ollakka |
Bug Description
Offsets array in wsrep_rec_
ulint offsets_
ut_ad(index);
key_parts = dict_index_
*offsets_ = (sizeof offsets_) / sizeof *offsets_;
rec_get_
However, rec_get_offsets() may allocate new block of memory if number of returned offsets won't fit in offsets_ array. In this case offsets_ array remains uninitialized. Code following this initialization should use pointer returned by rec_get_offsets() instead.
Related branches
To post a comment you must log in.
Fix committed in lp:codership-mysql/5.5 revno 3734