Bug#36593265 MySQL server heap-buffer-overflow in strlen

Tor Didriksen · Tor Didriksen · commit c6997b13cfa0 · 2024-07-04T09:49:29.000+02:00
When converting a MySQL String to an std::string,
use {ptr(), length()} rather than strlen().

Change-Id: Ie59965ecccf9846cf5c18b90b572328263c1cefa
diff --git a/sql/item_strfunc.cc b/sql/item_strfunc.cc
@@ -422,7 +422,7 @@ class kdf_argument {
       *error_generated = true;
       return false;
     }
-    kdf_option = kdf_option_value->ptr();
+    kdf_option = to_string(*kdf_option_value);
     return true;
   }
 

Original file line number	Diff line number	Diff line change
`@@ -422,7 +422,7 @@ class kdf_argument {`
`422`	`422`	`*error_generated = true;`
`423`	`423`	`return false;`
`424`	`424`	`}`
`425`		`- kdf_option = kdf_option_value->ptr();`
	`425`	`+ kdf_option = to_string(*kdf_option_value);`
`426`	`426`	`return true;`
`427`	`427`	`}`
`428`	`428`