diff options
| author | Thirunarayanan Balathandayuthapani <thiru@mariadb.com> | 2020-06-17 21:03:00 +0530 |
|---|---|---|
| committer | Thirunarayanan Balathandayuthapani <thiru@mariadb.com> | 2020-06-17 21:04:18 +0530 |
| commit | 815fc9873230cb8085e1811578757946db555767 (patch) | |
| tree | 5c25f3d8c6aec048644f761ae8494ae9d3ed7b50 | |
| parent | 471d7a9762139f9154174d9d1f9613925fdc911f (diff) | |
| download | mariadb-git-815fc9873230cb8085e1811578757946db555767.tar.gz | |
MDEV-22904 Compressed row format table tries to access freed blob
- This is a regression of MDEV-21174(56f6dab1d0e5a464ea49c1e5efb0032a0f5cea3e).
InnoDB resets the BTR_EXTERN_LEN value at wrong offset.
| -rw-r--r-- | storage/innobase/btr/btr0cur.cc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/storage/innobase/btr/btr0cur.cc b/storage/innobase/btr/btr0cur.cc index 4fbd1d653ac..c99b737200d 100644 --- a/storage/innobase/btr/btr0cur.cc +++ b/storage/innobase/btr/btr0cur.cc @@ -7712,7 +7712,7 @@ btr_free_externally_stored_field( if (UNIV_LIKELY_NULL(block->page.zip.data)) { mach_write_to_4(field_ref + BTR_EXTERN_PAGE_NO, next_page_no); - memset(field_ref + BTR_EXTERN_LEN, 0, 4); + memset(field_ref + BTR_EXTERN_LEN + 4, 0, 4); page_zip_write_blob_ptr(block, rec, index, offsets, i, &mtr); } else { |