diff options
author | Sergei Golubchik <sergii@pisem.net> | 2013-01-08 21:21:28 +0100 |
---|---|---|
committer | Sergei Golubchik <sergii@pisem.net> | 2013-01-08 21:21:28 +0100 |
commit | 8aaacc9102b3d536cc2682fe429c5023956a6eea (patch) | |
tree | d15a04ded0fe66115dbdcdb3ed4ba41d02c86b7c /mysql-test/t/func_gconcat.test | |
parent | 78d9fdb134c58ccf792fdec2bb745cb5ff6ec2ec (diff) | |
download | mariadb-git-8aaacc9102b3d536cc2682fe429c5023956a6eea.tar.gz |
MDEV-3987 uninitialized read in Item_cond::fix_fields leads to crash: select .. where .. in ( select ... )
change Item_func_group_concat to use max_length according to the expected semantics
Diffstat (limited to 'mysql-test/t/func_gconcat.test')
-rw-r--r-- | mysql-test/t/func_gconcat.test | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/mysql-test/t/func_gconcat.test b/mysql-test/t/func_gconcat.test index f84c112d303..936b93b49c9 100644 --- a/mysql-test/t/func_gconcat.test +++ b/mysql-test/t/func_gconcat.test @@ -795,3 +795,11 @@ INSERT INTO t2 SELECT GROUP_CONCAT(a), b FROM t1 GROUP BY b; SET group_concat_max_len = DEFAULT; SET @@sql_mode = @old_sql_mode; DROP TABLE t1, t2; + +# +# MDEV-3987 uninitialized read in Item_cond::fix_fields leads to crash: select .. where .. in ( select ... ) +# +create table t1 (a char(1) character set utf8); +insert into t1 values ('a'),('b'); +select 1 from t1 where a in (select group_concat(a) from t1); +drop table t1; |