Description
There is a check of the variable set for zero in line № 633:
|
if (!set || !row_buffers) { |
But if
set == NULL, we go to line № 737:
|
DBG_INF_FMT("rows=%llu", (unsigned long long)result->stored_data->row_count); |
Here the variable
result->stored_data is dereferenced. But the variable
set is equal to variable
result->stored_data before checking.
|
MYSQLND_RES_BUFFERED * set = result->stored_data; |
Found by Linux Verification Center (portal.linuxtesting.ru) with SVACE.
Author A. Voronin.
PHP Version
PHP 8.2.3
Description
There is a check of the variable
setfor zero in line № 633:php-src/ext/mysqlnd/mysqlnd_result.c
Line 633 in cc5a1ba
But if
set == NULL, we go to line № 737:php-src/ext/mysqlnd/mysqlnd_result.c
Line 737 in cc5a1ba
Here the variable
result->stored_datais dereferenced. But the variablesetis equal to variableresult->stored_databefore checking.php-src/ext/mysqlnd/mysqlnd_result.c
Line 629 in cc5a1ba
Found by Linux Verification Center (portal.linuxtesting.ru) with SVACE.
Author A. Voronin.
PHP Version
PHP 8.2.3