mirror/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2025-01-17 20:42:30 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix for overwriting of the stack when table name length was larger

Browse source 
than 32 bytes. getWords interpreted length as number of words and
got number of bytes.
This commit is contained in:
mronstrom@mysql.com 2004-09-02 15:13:50 +02:00
parent 22f21ba700
commit 99f9ff912f
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ndb/src/kernel/blocks/dbdict/Dbdict.cpp
View file

@ -5660,7 +5660,7 @@ void Dbdict::execGET_TABINFOREQ(Signal* signal)
signal->getSection(ssPtr,GetTabInfoReq::TABLE_NAME);
SimplePropertiesSectionReader r0(ssPtr, getSectionSegmentPool());
r0.reset(); // undo implicit first()
if(r0.getWords((Uint32*)tableName, len))
if(r0.getWords((Uint32*)tableName, ((len + 3)/4)))
memcpy(keyRecord.tableName, tableName, len);
else {
jam();