Bug#25471090: MYSQL USE AFTER FREE

fix another similar line followup for 7828ba0
MariaDB · Apr 27, 2018 · 5cfe523 · 5cfe523
1 parent eb057dc
commit 5cfe523
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sql-common/client.c b/sql-common/client.c
@@ -1636,7 +1636,7 @@ MYSQL_DATA *cli_read_rows(MYSQL *mysql,MYSQL_FIELD *mysql_fields,
       else
       {
 	cur->data[field] = to;
-        if (len > (ulong) (end_to - to))
+        if (to + len > end_to)
         {
           free_rows(result);
           set_mysql_error(mysql, CR_MALFORMED_PACKET, unknown_sqlstate);