[Bugfix](string_functions) fix heap-buffer-overflow on find_in_set (a…

…pache#12613)
adonis0147 · Sep 15, 2022 · d8b6f09 · d8b6f09
1 parent 47d43b3
commit d8b6f09
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/be/src/exprs/string_functions.cpp b/be/src/exprs/string_functions.cpp
@@ -710,7 +710,7 @@ IntVal StringFunctions::find_in_set(FunctionContext* context, const StringVal& s
     do {
         end = start;
         // Position end.
-        while (str_set.ptr[end] != ',' && end < str_set.len) {
+        while (end < str_set.len && str_set.ptr[end] != ',') {
             ++end;
         }
         StringValue token(reinterpret_cast<char*>(str_set.ptr) + start, end - start);