• Tor Didriksen's avatar
    Bug #11792200 - DIVIDING LARGE NUMBERS CAUSES STACK CORRUPTIONS · 4148b039
    Tor Didriksen authored
    This was a buffer overrun in do_div_mod(), overwriting the internal buffer
    of auto variable 'tmp' in Item_func_int_div::val_int.
    Result on windows: 'this' is set to zero, and crash.
    Ran fine on other platforms (no valgrind warnings),
    but this is undefined behaviour on any platform of course.
    4148b039
func_math.test 15.6 KB