Closed GaranR closed 1 week ago
/label affects-5.4
/label affects-8.1
/label affects-6.1
/label affects-6.5
/label affects-7.1
/label affects-7.5
Reproduced with tidb_version: | Release Version: v8.2.0-alpha-6-g8f138d5113 Edition: Community Git Commit Hash: 8f138d511325aaafd0ba7e94d1f6fb1dc4ac7b36 Git Branch: HEAD UTC Build Time: 2024-04-22 08:00:01 GoVersion: go1.21.6 Race Enabled: false Check Table Before Drop: false Store: tikv |
Duplicated with #52768 , close it.
/close
@yibin87: Closing this issue.
Bug Report
Please answer these questions before submitting your issue. Thanks!
1. Minimal reproduce step (Required)
First execute the following valid.sql valid.txt
Then a crash occurs when executing the error.sql below error.txt
Additionally, here are some similar bugs, where
AppendMyDecimal
is replaced byAppendPartialRow
,AppendInt64
,AppendFloat64
,AppendUint64
in the call stack. These can be reproduced with the following PoC. Append_bugs.zip2. What did you expect to see? (Required)
Expect no crashes
3. What did you see instead (Required)
tidb.log:
4. What is your TiDB version? (Required)
We are the BASS team from the School of Cyber Science and Technology at Beihang University. Our main focus is on system software security, operating systems, and program analysis research, as well as the development of automated program testing frameworks for detecting software defects. Using our self-developed database vulnerability testing tool, we have identified the above-mentioned vulnerabilities in TiDB that may lead to database crashes.