pingcap / tidb

TiDB - the open-source, cloud-native, distributed SQL database designed for modern applications.
https://pingcap.com
Apache License 2.0
37.19k stars 5.84k forks source link

TiDB and MySQL behave differently when union `quote(cast('xxxx' as char))` and string literal #56587

Open r33s3n6 opened 2 weeks ago

r33s3n6 commented 2 weeks ago

1. Minimal reproduce step (Required)

select quote(cast('abcdefg' as char)) union all
select '1' where 0<>0;

2. What did you expect to see? (Required)

mysql> select quote(cast('abcdefg' as char)) union all
    -> select '1' where 0<>0;
+--------------------------------+
| quote(cast('abcdefg' as char)) |
+--------------------------------+
| 'abcdefg'                      |
+--------------------------------+
1 row in set (0.00 sec)

3. What did you see instead (Required)

mysql> select quote(cast('abcdefg' as char)) union all
    -> select '1' where 0<>0;
+--------------------------------+
| quote(cast('abcdefg' as char)) |
+--------------------------------+
| '                              |
+--------------------------------+
1 row in set, 1 warning (0.00 sec)
mysql> show warnings;
+---------+------+----------------------------------------+
| Level   | Code | Message                                |
+---------+------+----------------------------------------+
| Warning | 1406 | Data Too Long, field len 1, data len 9 |
+---------+------+----------------------------------------+
1 row in set (0.00 sec)

4. What is your TiDB version? (Required)

Release Version: v8.4.0-alpha-370-gf773b6eeb4
Edition: Community
Git Commit Hash: f773b6eeb4593a3e2c998c265f491a016570a426
Git Branch: HEAD
UTC Build Time: 2024-10-11 02:08:09
GoVersion: go1.23.2
Race Enabled: false
Check Table Before Drop: false
Store: tikv

about us

We are the BASS team from the School of Cyber Science and Technology at Beihang University. Our main focus is on system software security, operating systems, and program analysis research, as well as the development of automated program testing frameworks for detecting software defects. Using our self-developed database vulnerability testing tool, we have identified the above-mentioned vulnerabilities in TiDB that may lead to database logic error.

joechenrh commented 2 weeks ago

/remove-label may-affects-5.4 /remove-label may-affects-6.1 /remove-label may-affects-6.5 /remove-label may-affects-7.1 /remove-label may-affects-7.5 /remove-label may-affects-8.1