Merge pull request #18015 from taosdata/fix/TS-2014

fix(client):taosAdapter core

src/client/src/tscServer.c

@@ -1037,6 +1037,10 @@ int tscBuildQueryMsg(SSqlObj *pSql, SSqlInfo *pInfo) {
   int32_t code = TSDB_CODE_SUCCESS;
   int32_t size = tscEstimateQueryMsgSize(pSql);
   assert(size > 0);
+  if (pSql != pSql->signature) {
+    tscError("%p query msg has been freed", pSql);
+    return TSDB_CODE_TSC_INVALID_OPERATION;
+  }
 
   if (TSDB_CODE_SUCCESS != tscAllocPayloadFast(pCmd, size)) {
     tscError("%p failed to malloc for query msg", pSql);

src/client/src/tscSubquery.c

@@ -2785,6 +2785,10 @@ static void doSendQueryReqs(SSchedMsg* pSchedMsg) {
         tscError("0x%"PRIx64"subqueries objs reset unexpectedly. numOfSub:%d", pSql->self, pSql->subState.numOfSub);
         break;
     }
+    if (pSub != pSub->signature) {
+      tscError("%p query msg has been freed", pSub);
+      break;
+    }
     SRetrieveSupport* pSupport = pSub->param;
 
     tscDebug("0x%"PRIx64" sub:0x%"PRIx64" launch subquery, orderOfSub:%d.", pSql->self, pSub->self, pSupport->subqueryIndex);