diff options
| author | Sergei Golubchik <serg@mariadb.org> | 2015-07-31 22:09:46 +0200 |
|---|---|---|
| committer | Sergei Golubchik <serg@mariadb.org> | 2015-07-31 22:09:46 +0200 |
| commit | 96badb16afcf8a6ae3d03918419fc51ace4be236 (patch) | |
| tree | 86469f7d770524acbca2ac44e1300ae46296224a /vio | |
| parent | 409709ec7edc0dd6eb725e766f0d4c52192accfc (diff) | |
| download | mariadb-git-96badb16afcf8a6ae3d03918419fc51ace4be236.tar.gz | |
MDEV-7821 Server crashes in Item_func_group_concat::fix_fields on 2nd execution of PS
Correct fix for this bug.
The problem was that Item_func_group_concat() was calling
setup_order(), passing args as the second argument,
ref_pointer_array. While ref_pointer_array should have free
space at the end, as setup_order() can append elements to it.
In this particular case args[] elements were overwritten when
setup_order() was pushing new elements into ref_pointer_array.
Diffstat (limited to 'vio')
0 files changed, 0 insertions, 0 deletions