diff options
author | unknown <gkodinov/kgeorge@macbook.gmz> | 2007-09-28 16:46:05 +0300 |
---|---|---|
committer | unknown <gkodinov/kgeorge@macbook.gmz> | 2007-09-28 16:46:05 +0300 |
commit | bebcb221834a08e492c188fb064414c7dc131902 (patch) | |
tree | e17a84a94ed96a56d4a7125a08e81d41cef2429d /innobase/sync/sync0sync.c | |
parent | ffdc5b93025c487297635848d9f791822fdf09b5 (diff) | |
download | mariadb-git-bebcb221834a08e492c188fb064414c7dc131902.tar.gz |
Bug #30587: mysql crashes when trying to group by TIME div NUMBER
When calculating the result length of an integer DIV function
the number of decimals was used without checking the result type
first. Thus an uninitialized number of decimals was used for some
types. This caused an excessive amount of memory to be allocated
for the field's buffer and crashed the server.
Fixed by using the number of decimals only for data types that
can have decimals and thus have valid decimals number.
mysql-test/r/func_math.result:
Bug #30587: test case
mysql-test/t/func_math.test:
Bug #30587: test case
sql/item_func.cc:
Bug #30587: Don't use decimals on a type that doesn't have them.
Diffstat (limited to 'innobase/sync/sync0sync.c')
0 files changed, 0 insertions, 0 deletions