Commit 9e949061 authored by unknown's avatar unknown
Browse files

Fix for overwriting of the stack when table name length was larger 

than 32 bytes. getWords interpreted length as number of words and
got number of bytes.
parent 58b03d45

ndb/src/kernel/blocks/dbdict/Dbdict.cpp

+1 −1
Original line number Diff line number Diff line
@@ -5660,7 +5660,7 @@ void Dbdict::execGET_TABINFOREQ(Signal* signal) 
    signal->getSection(ssPtr,GetTabInfoReq::TABLE_NAME);

    SimplePropertiesSectionReader r0(ssPtr, getSectionSegmentPool());

    r0.reset(); // undo implicit first()

    if(r0.getWords((Uint32*)tableName, len))

    if(r0.getWords((Uint32*)tableName, ((len + 3)/4)))

      memcpy(keyRecord.tableName, tableName, len);

    else {

      jam();