** Changed in: tarantool
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Tarantool
Development Team, which is subscribed to tarantool.
https://bugs.launchpad.net/bugs/1098517
Title:
An out of bounds memory access in lua iterator
Status in Tarantool - an efficient in-memory data store:
Fix Released
Bug description:
space[0].enabled = 1
space[0].index[0].type = "HASH"
space[0].index[0].unique = 1
space[0].index[0].key_field[0].fieldno = 0
space[0].index[0].key_field[0].type = "NUM"
branch master: box.space[0].index[0]:iterator(box.index.EQ, 1, 2, 3, 4, 5, 6,
7);
branch stable: box.space[0].index[0]:next(1, 2, 3, 4, 5, 6, 7)
----
branch master: lbox_create_iterator(struct lua_State *L
branch stable: static lbox_index_iterator(struct lua_State *L,
...
} else {
/* Single or multi- part key. */
field_count = argc;
struct tbuf *data = tbuf_alloc(fiber->gc_pool);
for (int i = 0; i < argc; ++i)
append_key_part(L, i + 2, data,
index->key_def->parts[i].type);
<!-- (i < index->key_def->part_count) is not checked
key = data->data;
}
...
----
To manage notifications about this bug go to:
https://bugs.launchpad.net/tarantool/+bug/1098517/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~tarantool-developers
Post to : [email protected]
Unsubscribe : https://launchpad.net/~tarantool-developers
More help : https://help.launchpad.net/ListHelp
