Out-of-bound reads in loose index scan
Bug #1067099 reported by
Alexey Kopytov
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MySQL Server |
Unknown
|
Unknown
|
|||
Percona Server moved to https://jira.percona.com/projects/PS |
Triaged
|
High
|
Unassigned | ||
5.1 |
Triaged
|
High
|
Unassigned | ||
5.5 |
Triaged
|
High
|
Unassigned |
Bug Description
Found using AddressSanitizer testing.
When the code QUICK_GROUP_
However, that's not the case for cases when either of the arguments is a pointer to 'is_null_string' which is a 2-byte static buffer. This is the case detected by AddressSanitizer during a main.group_min_max test run.
How to repeat:
Examine the code or run main.group_min_max against an AddressSanitize
tags: | added: asan |
To post a comment you must log in.