1
0
mirror of https://github.com/MariaDB/server.git synced 2025-12-13 20:03:16 +03:00
Files
mariadb/mysql-test/r
Alexey Kopytov 0e74ac5028 Bug #55568: user variable assignments crash server when used
within query

The server could crash after materializing a derived table
which requires a temporary table for grouping.

When destroying the temporary table used to execute a query for
a derived table, JOIN::destroy() did not clean up Item_fields
pointing to fields in the temporary table. This led to
dereferencing a dangling pointer when printing out the items
tree later in the outer SELECT.

The solution is an addendum to the patch for bug37362: in
addition to cleaning up items in tmp_all_fields3, do the same
for items in tmp_all_fields1, since now we have an example
where this is necessary.
2010-08-24 14:35:48 +04:00
..
2009-02-10 16:27:35 +03:00
2009-08-20 14:30:59 +02:00
2010-02-25 23:13:11 +04:00
2009-08-10 15:46:20 -03:00
2009-06-01 16:00:38 +04:00
2009-02-07 16:50:31 +01:00
2009-12-11 16:02:47 +02:00
2009-02-03 14:45:17 +01:00
2009-05-06 15:00:14 +05:30
2009-06-15 17:36:51 +03:00
2009-09-02 18:58:17 +02:00
2009-04-09 14:38:50 +05:00
2010-06-01 11:54:06 +04:00
2009-03-16 20:54:50 +01:00
2009-12-17 12:06:36 -08:00
2009-02-19 18:22:28 +01:00
2009-11-06 17:54:19 +03:00
2010-01-29 16:54:27 +02:00
2009-12-10 17:38:01 +02:00
2009-02-03 14:45:17 +01:00
2010-03-12 11:52:38 +01:00
2010-03-12 11:52:38 +01:00
2009-10-27 14:09:36 +04:00
2010-04-30 15:27:17 +04:00
2009-11-27 18:10:28 +02:00
2009-06-10 11:58:36 +03:00
2009-09-28 16:48:40 +03:00
2009-02-09 22:00:15 +01:00
2009-02-19 18:24:25 -05:00
2009-02-14 20:14:10 +03:00
2010-08-13 14:18:46 +03:00
2010-06-04 17:10:22 +03:00