• Sujatha Sivakumar's avatar
    Bug#16736412: THE SERVER WAS CRASHED WHILE EXECUTING · 2a2641ad
    Sujatha Sivakumar authored
    "SHOW BINLOG EVENTS"
    
    Problem:
    ========
    mysql was crashed after executing "show binlog events in
    'mysql-bin.000005' from 99", the crash happened randomly.
    
    Analysis:
    ========
    During construction of LOAD EVENT or NEW LOAD EVENT object
    if the starting offset is provided as incorrect value then
    all the object members that are retrieved from the offset
    are also invalid.  Some times it will lead to out of bound
    address offsets.  In the bug scenario, the file name is
    extracrated from an invalid address and the same is fed to
    strlen(fname) function. Passing invalid address to strlen
    will lead to crash.
    
    Fix:
    ===
    Validate if the given offset falls within the event boundary
    or not.
    
    sql/log_event.cc:
      Added code to validate fname's address. "fname" should
      be within event boundary. Added code to find invalid
      invents.
    2a2641ad
log_event.cc 333 KB