Georg Richter cffcd368b0 CONC-863: Check that name offsets of dynamic columns do not decrease ...

read_name() computed the length of a column name as the difference of
two name offsets read from the packed column, without checking that the
next offset is not smaller than the current one. The subtraction wrapped
around, and mariadb_dyncol_list_named() passed the result as size to
memcpy().

2026-10-20 18:05:48 +02:00

..

libmariadb

CONC-863: Check that name offsets of dynamic columns do not decrease

2026-10-20 18:05:48 +02:00

mytap

Fix miscellaneous typos

2025-07-13 18:42:30 +03:00