Sergei Petrunia 5e5ae51b73 MDEV-21341: Fix UBSAN failures: Issue Six ...

(Variant #2 of the patch, which keeps the sp_head object inside the
MEM_ROOT that sp_head object owns)
(10.3 requires extra work due to sp_package, will commit a separate
patch for it)

sp_head::operator new() and operator delete() were dereferencing sp_head*
pointers to memory that didn't hold a valid sp_head object (it was
not created/already destroyed).
This caused UBSan to crash when looking up type information.

Fixed by providing static sp_head::create() and sp_head::destroy() methods.

2020-01-14 18:15:32 +03:00

6.8 KiB

Raw Blame History

View Raw