diff options
| author | Tor Didriksen <tor.didriksen@oracle.com> | 2011-03-03 15:25:41 +0100 |
|---|---|---|
| committer | Tor Didriksen <tor.didriksen@oracle.com> | 2011-03-03 15:25:41 +0100 |
| commit | 4148b03910b5642cd77c9d4512d56e6d04d578b7 (patch) | |
| tree | 1dfbda0325199cae2befb936dbc11df2a9825f2e /COPYING | |
| parent | 6ebf55aff9925c1fa54b6f073497f6be465f4d1c (diff) | |
| download | mariadb-git-4148b03910b5642cd77c9d4512d56e6d04d578b7.tar.gz | |
Bug #11792200 - DIVIDING LARGE NUMBERS CAUSES STACK CORRUPTIONS
This was a buffer overrun in do_div_mod(), overwriting the internal buffer
of auto variable 'tmp' in Item_func_int_div::val_int.
Result on windows: 'this' is set to zero, and crash.
Ran fine on other platforms (no valgrind warnings),
but this is undefined behaviour on any platform of course.
Diffstat (limited to 'COPYING')
0 files changed, 0 insertions, 0 deletions