Ticket History #5880: libdb btree page split on zero index corrupts db

# Thu Jan 31 20:03:19 2008 tlyu (Taylor Yu) - Ticket created

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 742B

Splitting a btree page on index 0 can corrupt the database if the key
length plus data length is exactly a certain value. This certain size
causes the item to get the left page to itself, and causes the right
page to contain an erroneous additional index "hole" having an
uninitialized value. This bug may be one of the remaining causes of
unexplained database corruption reported over the years. Shawn Emery
provided useful data from actual instances of this corruption.

Add a test case for this bug. (Raw libdb test rather than kdb; the
latter would be much harder.)

Commit By: tlyu

Revision: 20214
Changed Files:
_U trunk/
U trunk/src/plugins/kdb/db2/libdb2/btree/bt_split.c
U trunk/src/plugins/kdb/db2/libdb2/test/run.test

# Thu Jan 31 20:03:22 2008 tlyu (Taylor Yu) - Requestor tlyu (Taylor Yu) added

# Thu Jan 31 20:03:22 2008 tlyu (Taylor Yu) - Status changed from 'new' to 'resolved'

# Thu Jan 31 20:03:23 2008 tlyu (Taylor Yu) - Tags pullup added

# Thu Jan 31 20:03:23 2008 tlyu (Taylor Yu) - Target_Version 1.6.4 added

# Thu Jan 31 20:03:24 2008 tlyu (Taylor Yu) - Component krb5-kdc added

# Thu Jan 31 20:23:18 2008 tlyu (Taylor Yu) - Version_Fixed 1.6.4 added

# Thu Jan 31 20:23:18 2008 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 1012B

pull up r20214 from trunk

r20214@cathode-dark-space: tlyu | 2008-01-31 20:03:11 -0500
ticket: new
target_version: 1.6.4
tags: pullup
subject: libdb btree page split on zero index corrupts db
component: krb5-kdc

Splitting a btree page on index 0 can corrupt the database if the key
length plus data length is exactly a certain value. This certain size
causes the item to get the left page to itself, and causes the right
page to contain an erroneous additional index "hole" having an
uninitialized value. This bug may be one of the remaining causes of
unexplained database corruption reported over the years. Shawn Emery
provided useful data from actual instances of this corruption.

Add a test case for this bug. (Raw libdb test rather than kdb; the
latter would be much harder.)

Commit By: tlyu

Revision: 20215
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/plugins/kdb/db2/libdb2/btree/bt_split.c
U branches/krb5-1-6/src/plugins/kdb/db2/libdb2/test/run.test

# Wed Dec 16 18:02:51 2015 tlyu (Taylor Yu) - CustomField pullup deleted