ha_innobase.cc:

  Make sure no memory overrun of key buffer in range estimation


sql/ha_innobase.cc:
  Make sure no memory overrun of key buffer in range estimation

sql/ha_innobase.cc

@@ -2956,7 +2956,8 @@ ha_innobase::records_in_range(
 	KEY*		key;
 	dict_index_t*	index;
 	mysql_byte*	key_val_buff2 	= (mysql_byte*) my_malloc(
-							table->reclength,
+						  table->reclength
+      						+ table->max_key_length + 100,
 								MYF(MY_WME));
 	dtuple_t*	range_start;
 	dtuple_t*	range_end;