1
0
mirror of https://github.com/MariaDB/server.git synced 2025-04-29 21:37:04 +03:00
Alexey Kopytov 07e95b39c4 Bug#54477: Crash on IN / CASE with NULL arguments
Incorrect handling of NULL arguments could lead to a crash on
the IN or CASE operations when either NULL arguments were
passed explicitly as arguments (IN) or implicitly generated by
the WITH ROLLUP modifier (both IN and CASE).

Item_func_case::find_item() assumed all necessary comparators
to be instantiated in fix_length_and_dec(). However, in the
presence of WITH ROLLUP modifier, arguments could be
substituted with an Item_null leading to an "unexpected"
STRING_RESULT comparator being invoked.

In addition to the problem identical to the above,
Item_func_in::val_int() could crash even with explicitly passed
NULL arguments due to an optimization in fix_length_and_dec()
leading to NULL arguments being ignored during comparators
creation.
2010-06-22 22:53:08 +04:00
..
2009-08-20 14:30:59 +02:00
2009-02-09 22:00:15 +01:00
2010-02-25 23:13:11 +04:00
2009-02-09 22:00:15 +01:00
2009-09-29 17:38:40 +02:00
2009-03-27 10:18:06 +08:00
2009-02-06 18:25:08 +01:00
2009-01-23 13:22:05 +01:00
2009-12-11 16:02:47 +02:00
2009-05-06 15:00:14 +05:30
2009-09-02 18:58:17 +02:00
2009-04-09 14:38:50 +05:00
2010-06-01 11:54:06 +04:00
2010-04-27 00:46:52 +04:00
2009-10-20 11:00:07 -07:00
2010-06-09 11:29:27 +03:00
2009-12-17 12:06:36 -08:00
2010-01-29 16:54:27 +02:00
2009-12-10 17:38:01 +02:00
2009-02-03 14:45:17 +01:00
2009-08-12 12:03:05 +02:00
2010-03-12 11:52:38 +01:00
2010-01-29 15:08:49 +04:00
2010-01-15 10:51:39 +02:00
2009-07-03 10:19:32 +02:00
2009-11-27 18:10:28 +02:00
2009-12-23 17:44:03 +04:00
2009-06-10 11:58:36 +03:00
2009-02-19 18:24:25 -05:00
2009-01-31 02:08:41 +01:00
2009-12-22 14:38:33 +04:00
2010-06-04 17:10:22 +03:00