Issue Details (XML | Word | Printable)

Key: CORE-6325
Type: Bug Bug
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Adriano dos Santos Fernandes
Reporter: Adriano dos Santos Fernandes
Votes: 0
Watchers: 1
Operations

If you were logged in you would be able to see more operations.
Firebird Core

NTILE/RANK/PERCENT_RANK may cause problems in big statements

Created: 08/Jun/20 12:57 AM   Updated: 22/Jun/20 04:49 PM
Component/s: Engine
Affects Version/s: 4.0 Beta 2
Fix Version/s: 4.0 RC 1

QA Status: Cannot be tested


 Description  « Hide
I do not have a test case, but NTILE/RANK/PERCENT_RANK is using USHORT for its impure offset, which may cause it to overflow and use the space of another statement or expression.

That may cause wrong value or even crashes.

 All   Comments   Change History   Subversion Commits      Sort Order: Ascending order - Click to sort in descending order
Adriano dos Santos Fernandes made changes - 08/Jun/20 01:03 AM
Field Original Value New Value
Status Open [ 1 ] Resolved [ 5 ]
Assignee Adriano dos Santos Fernandes [ asfernandes ]
Fix Version/s 4.0 RC 1 [ 10930 ]
Resolution Fixed [ 1 ]
Pavel Zotov made changes - 09/Jun/20 01:21 PM
Status Resolved [ 5 ] Resolved [ 5 ]
QA Status No test Not enough information
Pavel Zotov made changes - 09/Jun/20 06:20 PM
Status Resolved [ 5 ] Resolved [ 5 ]
QA Status Not enough information Cannot be tested
Pavel Zotov made changes - 09/Jun/20 06:21 PM
Status Resolved [ 5 ] Closed [ 6 ]
Adriano dos Santos Fernandes made changes - 22/Jun/20 04:49 PM
Summary NTILE may cause problems in big statements NTILE/RANK/PERCENT_RANK may cause problems in big statements
Description I do not have a test case, but NTILE is using USHORT for its impure offset, which may cause it to overflow and use the space of another statement or expression.

That may cause wrong value or even crashes.
I do not have a test case, but NTILE/RANK/PERCENT_RANK is using USHORT for its impure offset, which may cause it to overflow and use the space of another statement or expression.

That may cause wrong value or even crashes.