Files
doris/be
lihangyu 4ccdd65bf6 [Fix](array) fix mysql_row_buffer may use after free when reserve() delete original address in dynamic_mode (#11395)
```
if (!_dynamic_mode) {
	int8store(_len_pos, _pos - _len_pos - 8);
	_len_pos = nullptr;
}
```

_len_pos may be pointed to the pos which already deleted in reserve, int8store will asign value to the freed address,
and lead to use after free when build in ASAN.So I changed _len_pos to the offset of _buf
2022-08-01 22:52:19 +08:00
..