bug#33142: access after free() for blob replication and online alter table

1 files changed, 12 insertions, 0 deletions

diff --git a/storage/ndb/src/ndbapi/NdbEventOperationImpl.cpp b/storage/ndb/src/ndbapi/NdbEventOperationImpl.cpp
index a82983fca8c..dff953923fe 100644
--- a/storage/ndb/src/ndbapi/NdbEventOperationImpl.cpp
+++ b/storage/ndb/src/ndbapi/NdbEventOperationImpl.cpp
@@ -792,6 +792,18 @@ NdbEventOperationImpl::receive_event()
           p = p->next();
         }
       }
+      // change the blobHandle's to refer to the new table object.
+      NdbBlob *p = theBlobList;
+      while (p)
+      {
+        int no = p->getColumn()->getColumnNo();
+        NdbColumnImpl *tAttrInfo = at->getColumn(no);
+        DBUG_PRINT("info", ("blob_handle: 0x%lx  "
+                            "switching column impl 0x%lx -> 0x%lx",
+                            (long) p, (long) p->theColumn, (long) tAttrInfo));
+        p->theColumn = tAttrInfo;
+        p = p->next();
+      }
       if (tmp_table_impl) 
         delete tmp_table_impl;
     }