sql: fix possible use-after-free in select.c
This patch fixes a possible 'use-after-free' of field pOrderBy in generateWithRecursiveQuery(). Closes tarantool/security#120 NO_DOC=bugfix
Showing
- changelogs/unreleased/ghs-120-use-after-free.md 4 additions, 0 deletionschangelogs/unreleased/ghs-120-use-after-free.md
- src/box/sql/select.c 2 additions, 3 deletionssrc/box/sql/select.c
- test/sql-luatest/ghs_120_use_after_free_test.lua 26 additions, 0 deletionstest/sql-luatest/ghs_120_use_after_free_test.lua
Loading
Please register or sign in to comment