bzr push into mysql-6.0-bugteam branch (Alexey.Kopytov:3028 to 3029)

[Alexey Kopytov]

 3029 Alexey Kopytov	2009-02-06 [merge]
      Merged mysql-5.1-bugteam -> mysql-6.0-bugteam.

 3028 Alexey Kopytov	2009-02-06 [merge]
      Merge from the team tree.
modified:
  mysql-test/r/myisampack.result
  mysql-test/r/status.result
  mysql-test/suite/falcon/r/ps_8falcon.result
  mysql-test/suite/funcs_1/r/innodb_trig_09.result
  mysql-test/suite/funcs_1/r/memory_trig_09.result
  mysql-test/suite/funcs_1/r/myisam_trig_09.result
  mysql-test/suite/funcs_1/r/ndb_trig_09.result
  mysql-test/suite/funcs_1/triggers/triggers_09.inc
  mysql-test/suite/parts/inc/partition_auto_increment.inc
  mysql-test/suite/parts/r/partition_auto_increment_blackhole.result
  mysql-test/suite/parts/r/partition_auto_increment_falcon.result
  mysql-test/suite/parts/r/partition_auto_increment_innodb.result
  mysql-test/suite/parts/r/partition_auto_increment_maria.result
  mysql-test/suite/parts/r/partition_auto_increment_memory.result
  mysql-test/suite/parts/r/partition_auto_increment_myisam.result
  mysql-test/suite/parts/r/partition_auto_increment_ndb.result
  mysql-test/suite/rpl/t/rpl_heartbeat.test
  mysql-test/t/myisampack.test
  mysql-test/t/status.test
  storage/myisam/myisampack.c

=== modified file 'client/sql_string.cc'
--- a/client/sql_string.cc	2009-02-05 13:00:14 +0000
+++ b/client/sql_string.cc	2009-02-06 09:56:54 +0000
@@ -73,26 +73,26 @@ bool String::realloc(uint32 alloc_length
     if (alloced)
     {
       if ((new_ptr= (char*) my_realloc(Ptr,len,MYF(MY_WME))))
-        new_ptr[alloc_length]= 0;
+      {
+	Ptr=new_ptr;
+	Alloced_length=len;
+      }
       else
-        return TRUE;				// Signal error
+	return TRUE;				// Signal error
     }
     else if ((new_ptr= (char*) my_malloc(len,MYF(MY_WME))))
     {
-      if (str_length > len - 1)
-        str_length= 0;
       if (str_length)				// Avoid bugs in memcpy on AIX
-        memcpy(new_ptr, Ptr, str_length);
-      new_ptr[str_length]= 0;
+	memcpy(new_ptr,Ptr,str_length);
+      new_ptr[str_length]=0;
+      Ptr=new_ptr;
+      Alloced_length=len;
       alloced=1;
     }
     else
       return TRUE;			// Signal error
-    Ptr= new_ptr;
-    Alloced_length= len;
   }
-  else
-    Ptr[alloc_length]= 0;
+  Ptr[alloc_length]=0;			// This make other funcs shorter
   return FALSE;
 }
 

=== modified file 'mysql-test/r/func_str.result'
--- a/mysql-test/r/func_str.result	2009-02-05 13:00:14 +0000
+++ b/mysql-test/r/func_str.result	2009-02-06 09:56:54 +0000
@@ -2522,10 +2522,4 @@ def					format(a, 2)	253	49	4	Y	0	31	8
 format(a, 2)
 1.33
 drop table t1;
-CREATE TABLE t1 (c DATE, aa VARCHAR(30));
-INSERT INTO t1 VALUES ('2008-12-31','aaaaaa');
-SELECT DATE_FORMAT(c, GET_FORMAT(DATE, 'eur')) h, CONCAT(UPPER(aa),', ', aa) i FROM t1;
-h	i
-31.12.2008	AAAAAA, aaaaaa
-DROP TABLE t1;
 End of 5.0 tests

=== modified file 'mysql-test/t/func_str.test'
--- a/mysql-test/t/func_str.test	2009-02-05 12:49:59 +0000
+++ b/mysql-test/t/func_str.test	2009-02-06 09:53:20 +0000
@@ -1273,13 +1273,4 @@ select format(a, 2) from t1;
 --disable_metadata
 drop table t1;
 
-#
-# Bug #41868: crash or memory overrun with concat + upper, date_format functions
-#
-
-CREATE TABLE t1 (c DATE, aa VARCHAR(30));
-INSERT INTO t1 VALUES ('2008-12-31','aaaaaa');
-SELECT DATE_FORMAT(c, GET_FORMAT(DATE, 'eur')) h, CONCAT(UPPER(aa),', ', aa) i FROM t1;
-DROP TABLE t1;
-
 --echo End of 5.0 tests

=== modified file 'sql/protocol.cc'
--- a/sql/protocol.cc	2009-02-05 13:00:14 +0000
+++ b/sql/protocol.cc	2009-02-06 09:56:54 +0000
@@ -807,11 +807,6 @@ bool Protocol::send_result_set_row(List<
       my_message(ER_OUT_OF_RESOURCES, ER(ER_OUT_OF_RESOURCES), MYF(0));
       DBUG_RETURN(TRUE);
     }
-    /*
-      Reset str_buffer to its original state, as it may have been altered in
-      Item::send().
-    */
-    str_buffer.set(buffer, sizeof(buffer), &my_charset_bin);
   }
 
   DBUG_RETURN(FALSE);

=== modified file 'sql/sql_string.cc'
--- a/sql/sql_string.cc	2009-02-05 13:00:14 +0000
+++ b/sql/sql_string.cc	2009-02-06 09:56:54 +0000
@@ -73,26 +73,26 @@ bool String::realloc(uint32 alloc_length
     if (alloced)
     {
       if ((new_ptr= (char*) my_realloc(Ptr,len,MYF(MY_WME))))
-        new_ptr[alloc_length]= 0;
+      {
+	Ptr=new_ptr;
+	Alloced_length=len;
+      }
       else
-        return TRUE;				// Signal error
+	return TRUE;				// Signal error
     }
     else if ((new_ptr= (char*) my_malloc(len,MYF(MY_WME))))
     {
-      if (str_length > len - 1)
-        str_length= 0;
       if (str_length)				// Avoid bugs in memcpy on AIX
-        memcpy(new_ptr, Ptr, str_length);
-      new_ptr[str_length]= 0;
+	memcpy(new_ptr,Ptr,str_length);
+      new_ptr[str_length]=0;
+      Ptr=new_ptr;
+      Alloced_length=len;
       alloced=1;
     }
     else
       return TRUE;			// Signal error
-    Ptr= new_ptr;
-    Alloced_length= len;
   }
-  else
-    Ptr[alloc_length]= 0;
+  Ptr[alloc_length]=0;			// This make other funcs shorter
   return FALSE;
 }