Skip to content
Snippets Groups Projects
Commit 18d1acbd authored by Vladimir Davydov's avatar Vladimir Davydov
Browse files

vinyl: fix potential use-after-free in vy_read_view_merge

If is_first_insert flag is set and vy_stmt_type(rv->tuple) equals
IPROTO_DELETE, we free rv->tuple, but then we dereference it via
an on-stack variable to check if we need to turn a REPLACE into an
INSERT or vice versa. Fix this.
parent 32854f40
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment