[debian-mysql] Bug#477072: mysql-server-5.0: Arbitrary data input plus GIS functions causes mysql server crash

[tabris]

Norbert Tretkowski wrote:
> tags 477072 +unreproducible
> tags 477072 +moreinfo
> severity 477072 important
> thanks
>
> Am Sonntag, den 20.04.2008, 12:08 -0700 schrieb tabris:
>   
>> 	Given two data files, country.sql (~800 rows) and
>> mysql-crash.sql (a new table and a data conversion of the data in
>> country.sql).
>>
>> 	Result is a mysql server crash that results in loss of a)
>> persistent database connections b) data in memory tables c) temporary
>> tables.
>>
>> 	I won't claim that the data conversion is valid, but it
>> certainly shouldn't crash the mysql  server.
>>     
>
> I'm unable to reproduce this bug using the two provided files with
> 5.0.51a-3, hence I'm reducing severity.
>
> Could you please re-try with the latest version from testing?
>   
Just did retry. Still same result. What I do to reproduce it is first,
you unpack the files into a directory. then load the mysql shell, and
run this
source country.sql; source mysql-crash.sql;

and I get in response, a bunch of inserts, and then "ERROR 2013 (HY00):
Lost connection to MySQL server during query"

If I have say another program running that uses a memory table, and i
run this crash sequence, the data in any HEAP tables is lost.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/attachments/20080427/c504d30b/attachment.pgp