Bug #23736 Pointer free error in mysqlbinlog

Description:
The mysqlbinlog client issues the error: "Error: Freeing pointer out of range at line 95, '..\mysys\mf_tempdir.c'" when freeing the tempdir array. This appears when running in debug on Windows. I do not see this problem on Linux.

How to repeat:
Run the mysqlbinlog client and allow output to print to the console. I ran it using the switches:

mysqlbinlog --short-form - < master-bin.000001

Suggested fix:
It appears that the malloc is issuing memory that is outside the boundaries monitored by my_free().

Thank you for the bug report.

c:\mysql\bin>mysqlbinlog --short-form - < c:\mysql\data\light-bin.000002
/*!40019 SET @@session.max_insert_delayed_threads=0*/;
/*!50003 SET @OLD_COMPLETION_TYPE=@@COMPLETION_TYPE,COMPLETION_TYPE=0*/;
ERROR: Error in Log_event::read_log_event(): 'read error', data_len: 98, event_type: 15
# End of log file
ROLLBACK /* added by mysqlbinlog */;
/*!50003 SET COMPLETION_TYPE=@OLD_COMPLETION_TYPE*/;
Error: Freeing pointer out of range at line 92, '\cygwin\home\miguel\mysql-5.1\mysys\mf_tempdir.c'

Bug#25760 is a duplicate symptom

A patch for this bug has been committed. After review, it may
be pushed to the relevant source trees for release in the next
version. You can access the patch from:

  http://lists.mysql.com/commits/22357

ChangeSet@1.2403, 2007-03-20 10:34:25-04:00, iggy@recycle.(none) +4 -0
  Bug#23736 Pointer free error in mysqlbinlog
  - Mis-matched SAFEMALLOC defines caused misleading error message.

Pushed to 5.1.17

Noted in 5.1.17 changelog.

Debug builds of mysqlbinlog could fail with a memory error.

Setting report to Patch Queued pending fix for 5.0.x.

This was also pushed into 5.0.40 on 22 Mar, but was not properly marked at that time.  Our apologies.

Noted in 5.0.40 changelog.