diff options
| author | Sergei Petrunia <sergey@mariadb.com> | 2022-04-26 23:03:34 +0300 |
|---|---|---|
| committer | Sergei Petrunia <sergey@mariadb.com> | 2022-04-28 11:20:12 +0300 |
| commit | eea15803ec875a27801ed9d32b7f5fbc4aec1fc7 (patch) | |
| tree | 5c92cc16dfed9d2ca5e1c230264ff8df456e41eb /scripts | |
| parent | c711abd182f6d581b71d6988eff9c5c480bca62d (diff) | |
| download | mariadb-git-eea15803ec875a27801ed9d32b7f5fbc4aec1fc7.tar.gz | |
MDEV-28268: Server crashes in Expression_cache_tracker::fetch_current_stats
Expression_cache_tmptable object uses an Expression_cache_tracker object
to report the statistics.
In the common scenario, Expression_cache_tmptable destructor sets
tracker->cache=NULL. The tracker object survives after the expression
cache is deleted and one may call cache_tracker->fetch_current_stats()
for it with no harm.
However a degenerate cache with no parameters does not set
tracker->cache=NULL in Expression_cache_tmptable destructor which
results in an attempt to use freed data in the
cache_tracker->fetch_current_stats() call.
Fixed by setting tracker->cache to NULL and wrapping the assignment into
a function.
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions