MDEV-14596 Crash in INTERVAL(ROW(..),ROW(..))

Author: Alexander Barkov

mysql-test/r/func_set.result

@@ -220,3 +220,12 @@ NULL
 1,2,3,4,5,6,7
 
 DROP TABLE t1;
+#
+# MDEV-14596 Crash in INTERVAL(ROW(..),ROW(..))
+#
+SELECT INTERVAL(ROW(1,1),ROW(1,2));
+ERROR 21000: Operand should contain 1 column(s)
+SELECT INTERVAL(1,ROW(1,2));
+ERROR 21000: Operand should contain 1 column(s)
+SELECT INTERVAL(ROW(1,2),1);
+ERROR 21000: Operand should contain 1 column(s)

mysql-test/t/func_set.test

@@ -136,3 +136,14 @@ SELECT * FROM t1 WHERE FIND_IN_SET(NULL, NULL) IS UNKNOWN;
 
 --echo
 DROP TABLE t1;
+
+--echo #
+--echo # MDEV-14596 Crash in INTERVAL(ROW(..),ROW(..))
+--echo #
+
+--error ER_OPERAND_COLUMNS
+SELECT INTERVAL(ROW(1,1),ROW(1,2));
+--error ER_OPERAND_COLUMNS
+SELECT INTERVAL(1,ROW(1,2));
+--error ER_OPERAND_COLUMNS
+SELECT INTERVAL(ROW(1,2),1);

sql/item_cmpfunc.cc

@@ -2001,6 +2001,19 @@ bool Item_func_opt_neg::eq(const Item *item, bool binary_cmp) const
 }
 
 
+bool Item_func_interval::fix_fields(THD *thd, Item **ref)
+{
+ if (Item_int_func::fix_fields(thd, ref))
+ return true;
+ for (uint i= 0 ; i < row->cols(); i++)
+ {
+ if (row->element_index(i)->check_cols(1))
+ return true;
+ }
+ return false;
+}
+
+
 void Item_func_interval::fix_length_and_dec()
 {
  uint rows= row->cols();

sql/item_cmpfunc.h

@@ -728,6 +728,7 @@ class Item_func_interval :public Item_int_func
  {
  allowed_arg_cols= 0; // Fetch this value from first argument
  }
+ bool fix_fields(THD *, Item **);
  longlong val_int();
  void fix_length_and_dec();
  const char *func_name() const { return "interval"; }