diff options
| author | Tor Didriksen <tor.didriksen@oracle.com> | 2011-01-14 10:05:14 +0100 |
|---|---|---|
| committer | Tor Didriksen <tor.didriksen@oracle.com> | 2011-01-14 10:05:14 +0100 |
| commit | 7bf234032a6debc28f24fbbffe7e3cacb7b1803b (patch) | |
| tree | a6039675e5fcc73cb3cde80664b6c2e4f1f83294 /mysql-test/r/func_math.result | |
| parent | ff2b529918c2c12d4a29f8f34c5d9afbf5e40464 (diff) | |
| download | mariadb-git-7bf234032a6debc28f24fbbffe7e3cacb7b1803b.tar.gz | |
Bug #59241 invalid memory read in do_div_mod with doubly assigned variables
Fix: copy my_decimal by value, to avoid dangling pointers.
mysql-test/r/func_math.result:
New test case.
mysql-test/t/func_math.test:
New test case.
sql/item_cmpfunc.cc:
No need to call fix_buffer_pointer() anymore.
sql/item_func.cc:
Copy my_decimal by value, to avoid dangling pointers.
sql/my_decimal.h:
Implement proper copy constructor and assignment operator for my_decimal.
sql/sql_analyse.cc:
No need to call fix_buffer_pointer() anymore.
strings/decimal.c:
Remove #line directive: it messes up TAGS and it confuses gdb when debugging.
Diffstat (limited to 'mysql-test/r/func_math.result')
| -rw-r--r-- | mysql-test/r/func_math.result | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/mysql-test/r/func_math.result b/mysql-test/r/func_math.result index 31648aae7b0..db4f6ddcf20 100644 --- a/mysql-test/r/func_math.result +++ b/mysql-test/r/func_math.result @@ -641,3 +641,12 @@ INSERT INTO t1 (SELECT -pi()); Warnings: Warning 1265 Data truncated for column 'a' at row 1 DROP TABLE t1; +# +# Bug #59241 invalid memory read +# in do_div_mod with doubly assigned variables +# +SELECT ((@a:=@b:=1.0) div (@b:=@a:=get_format(datetime, 'usa'))); +((@a:=@b:=1.0) div (@b:=@a:=get_format(datetime, 'usa'))) +NULL +Warnings: +Warning 1366 Incorrect decimal value: '' for column '' at row -1 |