Marcin Maliszkiewicz 515b5722fd test/boost: add regression test for table_helper insert() UAF ...

Deterministic reproducer using an error injection point placed in
table_helper::insert() between cache_table_info() and execute(). The
test parks fiber A at the injection, drops the target table (evicting
the prepared_statements_cache entry), runs fiber B which nulls
_insert_stmt, then releases fiber A. Without the fix this crashes in
execute(); with the fix fiber A holds a local strong ref and proceeds.

Uses the new waiters() API to synchronize with fiber A's entry into
the injection.

2026-04-30 11:45:12 +02:00

11 KiB

Raw Blame History

View Raw