• Rucha Deodhar's avatar
    MDEV-28326: Server crashes in json_path_parts_compare · 3716eaff
    Rucha Deodhar authored
    Analysis: When trying to compare json paths, the array_sizes variable is
    NULL when beginning. But trying to access address by adding to the NULL
    pointer while recursive calling json_path_parts_compare() for handling
    double wildcard, it causes undefined behaviour and the array_sizes
    variable eventually becomes non-null (has some address).
    This eventually results in crash.
    Fix: If array_sizes variable is NULL then pass NULL recursively as well.
    3716eaff
func_json.test 48.4 KB