• Sergey Glukhov's avatar
    Bug#57194 group_concat cause crash and/or invalid memory reads with type errors · c04bf683
    Sergey Glukhov authored
    The problem is caused by bug49487 fix and became visible
    after after bug56679 fix.
    Items are cleaned up and set to unfixed state after filling derived table.
    So we can not rely on item::fixed state in Item_func_group_concat::print
    and we can not use 'args' array as items there may be cleaned up.
    The fix is always to use orig_args array of items as it
    always should contain the correct data.
    
    
    mysql-test/r/func_gconcat.result:
      test case
    mysql-test/t/func_gconcat.test:
      test case
    sql/item_sum.cc:
      The fix is always to use orig_args array of items.
    c04bf683
func_gconcat.result 43.9 KB