[td-225] fix invalid write in tbname query

d5e0bfc4 · Haojun Liao · 8114e1e7 · d5e0bfc4
显示空白变更内容
内联并排

Showing with 3 addition and 4 deletion

src/query/src/qast.c src/query/src/qast.c +3 -4

未找到文件。
--- a/src/query/src/qast.c
+++ b/src/query/src/qast.c
@@ -1062,10 +1062,9 @@ tExprNode* exprTreeFromTableName(const char* tbnameCond) {
      if (*e == TS_PATH_DELIMITER[0]) {
        cond = e + 1;
      } else if (*e == ',') {
-        size_t len = e - cond + VARSTR_HEADER_SIZE;
+        size_t len = e - cond;
-        char* p = exception_malloc(len);
+        char* p = exception_malloc(len + VARSTR_HEADER_SIZE);
-        varDataSetLen(p, len - VARSTR_HEADER_SIZE);
+        STR_WITH_SIZE_TO_VARSTR(p, cond, len);
-        memcpy(varDataVal(p), cond, len);
        cond += len;
        taosArrayPush(pVal->arr, &p);
      }