impala-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Henry Robinson (JIRA)" <j...@apache.org>
Subject [jira] [Created] (IMPALA-5774) StringFunctions::FindInSet() may read one byte beyond a string's extent
Date Mon, 07 Aug 2017 19:23:00 GMT
Henry Robinson created IMPALA-5774:
--------------------------------------

             Summary: StringFunctions::FindInSet() may read one byte beyond a string's extent
                 Key: IMPALA-5774
                 URL: https://issues.apache.org/jira/browse/IMPALA-5774
             Project: IMPALA
          Issue Type: Bug
          Components: Backend
    Affects Versions: Impala 2.10.0
            Reporter: Henry Robinson
            Assignee: Henry Robinson


The following may read {{str_set.ptr[str_set.len]}} if no ',' is found.

{code}
while(str_set.ptr[end] != ',' && end < str_set.len) ++end;
{code}

(This was discovered by poisoning mempool data from IMPALA-5666).



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message