mariadb/include
Nisha Gopalakrishnan 6608f84158 BUG#22594514: HANDLE_FATAL_SIGNAL (SIG=11) IN
UNIQUE::~UNIQUE | SQL/UNIQUES.CC:355

Analysis
========

Enabling the sort_buffer_size with a large value
can cause operations utilizing the sort buffer
like DELETE as mentioned in the bug report to
fail. 5.5 and 5.6 versions reports OOM error
while in 5.7+, the server crashes.

While initializing the mem_root for the sort buffer
tree, the block size for the mem_root is determined
from the 'sort_buffer_size' value. This unsigned
long value is typecasted to unsigned int, hence
it becomes zero. Further block_size computation
while initializing the mem_root results in a very
large block_size value. Hence while trying to
allocate a block during the DELETE operation,
an OOM error is reported. In case of 5.7+, the PFS
instrumentation for memory allocation, overshoots
the unsigned value and allocates a block of just
one byte. While trying to free the block of the
mem_root, the original block_size is used. This
triggers the crash since the server tries to free
unallocated memory.

Fix:
====
In order to restrict usage of such unreasonable
sort_buffer_size, the typecast of block size
to 'unsigned int' is removed and hence reports
OOM error across all versions for sizes
exceeding unsigned int range.
2016-03-17 08:49:37 +05:30
..
atomic Updated/added copyright headers 2011-06-30 17:46:53 +02:00
mysql Bug#17283409 4-WAY DEADLOCK: ZOMBIES, PURGING BINLOGS, 2014-05-08 18:13:01 +05:30
base64.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
CMakeLists.txt Updated/added copyright headers 2011-06-30 17:46:53 +02:00
decimal.h Updated/added copyright headers 2012-02-15 17:21:38 +01:00
errmsg.h BUG#18080920: CRASH; MY_REALLOC_STR DEREFERENCES NEGATIVE VALUE 2014-04-24 09:30:21 +05:30
ft_global.h Updated/added copyright headers 2013-02-26 06:35:17 +01:00
hash.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
heap.h Updated/added copyright headers 2012-02-15 17:13:47 +01:00
keycache.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
lf.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
m_ctype.h Bug #17760379 COLLATIONS WITH CONTRACTIONS BUFFER-OVERFLOW THEMSELVES IN THE FOOT 2014-01-11 14:48:29 +05:30
m_string.h Updated/added copyright headers 2013-02-26 06:35:17 +01:00
my_aes.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_alarm.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
my_alloc.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_atomic.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
my_attribute.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_base.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_bit.h Updated/added copyright headers 2011-07-04 01:25:49 +02:00
my_bitmap.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
my_check_opt.h Bug#17513737 INTRODUCE CHECK TABLE...QUICK 2013-10-17 18:09:04 +05:30
my_compare.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
my_compiler.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_dbug.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
my_dir.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_getopt.h Updated/added copyright headers 2014-01-06 10:52:35 +05:30
my_global.h Bug#16729109: FIX COMPILATION WARNINGS WITH GCC 4.8 2013-06-14 10:52:23 +02:00
my_libwrap.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_list.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_md5.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
my_net.h Updated/added copyright headers 2014-01-06 10:52:35 +05:30
my_nosys.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
my_pthread.h Bug#21770366 backport bug#21657078 to 5.5 and 5.6 2016-01-07 14:36:19 +05:30
my_rdtsc.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
my_stacktrace.h Bug#11761576 54082: HANDLE_SEGFAULT MAKES USE OF UNSAFE FUNCTIONS 2011-12-02 14:16:48 +01:00
my_sys.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
my_time.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
my_tree.h BUG#22594514: HANDLE_FATAL_SIGNAL (SIG=11) IN 2016-03-17 08:49:37 +05:30
my_uctype.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
my_user.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
my_xml.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
myisam.h Updated/added copyright headers 2014-01-06 10:52:35 +05:30
myisammrg.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
myisampack.h Updated/added copyright headers 2013-02-26 06:35:17 +01:00
mysql.h Updated/added copyright headers 2013-02-26 06:35:17 +01:00
mysql.h.pp Bug #12998841: libmysql divulges plaintext password upon request in 5.5 2012-07-05 09:55:20 +03:00
mysql_com.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
mysql_embed.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
mysql_time.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
mysql_version.h.in Fixing the bug 18184414: WRONG COPYRIGHT TO FILE INCLUDE/MYSQL_VERSION.H.IN 2014-02-06 14:11:38 +05:30
mysys_err.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
password.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
probes_mysql.d.base Updated/added copyright headers 2011-06-30 17:46:53 +02:00
probes_mysql.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
probes_mysql_nodtrace.h merge mysql-5.1->mysql-5.5 2011-07-07 12:42:14 +03:00
queues.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
rijndael.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
service_versions.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
sha1.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
sha2.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
sql_common.h Bug #12998841: libmysql divulges plaintext password upon request in 5.5 2012-07-05 09:55:20 +03:00
sslopt-case.h WL#9072: Backport WL#8785 to 5.5 2016-02-19 23:31:10 +04:00
sslopt-longopts.h WL#9072: Backport WL#8785 to 5.5 2016-02-19 23:31:10 +04:00
sslopt-vars.h WL#9072: Backport WL#8785 to 5.5 2016-02-19 23:31:10 +04:00
t_ctype.h Updated/added copyright header. Added line "use is subject to license terms" 2014-02-17 18:19:04 +05:30
thr_alarm.h Updated/added copyright headers. 2013-02-25 15:26:00 +01:00
thr_lock.h Updated/added copyright headers 2011-06-30 17:46:53 +02:00
typelib.h Fix for Bug 16395495 - OLD FSF ADDRESS IN GPL HEADER 2013-03-19 15:53:48 +01:00
violite.h Bug #21221862 NEWEST RHEL/CENTOS OPENSSL UPDATE BREAKS MYSQL DHE CIPHERS 2015-06-19 08:26:33 +05:30
welcome_copyright_notice.h Updated copyright year in user visible text 2016-01-11 14:10:58 +01:00