Alexey Kopytov a715b70278 Fix for bug #41868: crash or memory overrun with concat + upper, ...

date_format functions

String::realloc() did not check whether the existing string data fits in
the newly allocated buffer for cases when reallocating a String object
with external buffer (i.e.alloced == FALSE).  This could lead to memory
overruns in some cases.

2009-02-10 15:38:56 +03:00

64 KiB

Raw Blame History

View Raw