fix(category): SQL statement cause MariaDB crash

seems caused by GROUP BY statement in a sub-sub-query using the same table (joined) as the outer query. Crash seen with MariaDB 10.11 and (not sure) some MariaDB 10.6 instances
pluginsGLPI · May 23, 2023 · fb94035 · fb94035
1 parent f30c28e
commit fb94035
Showing 1 changed file with 4 additions and 10 deletions.
diff --git a/inc/category.class.php b/inc/category.class.php
@@ -91,7 +91,6 @@ public static function getCategoryTree(): array {
 
       $cat_table  = PluginFormcreatorCategory::getTable();
       $form_table = PluginFormcreatorForm::getTable();
-      $table_fp   = PluginFormcreatorForm_Profile::getTable();
 
       if (version_compare(GLPI_VERSION, '10.0.6') > 0) {
          $knowbase_category = KnowbaseItemCategory::SEEALL;
@@ -104,9 +103,7 @@ public static function getCategoryTree(): array {
          'contains' => '',
          'knowbaseitemcategories_id' => $knowbase_category,
       ]);
-      // GLPI 9.5 returns an array
-      $subQuery = new DBMysqlIterator($DB);
-      $subQuery->buildQuery($query_faqs);
+      $query_faqs['SELECT'] = [$query_faqs['FROM'] . '.' . 'id'];
 
       $dbUtils = new DbUtils();
       $entityRestrict = $dbUtils->getEntitiesRestrictCriteria($form_table, "", "", true, false);
@@ -120,18 +117,15 @@ public static function getCategoryTree(): array {
       // Get base query, add count and category condition
       $count_forms_criteria = PluginFormcreatorForm::getFormListQuery();
       $count_forms_criteria['COUNT'] = 'count';
-      $count_forms_criteria['WHERE']["$form_table.$categoryFk"] = new QueryExpression("$cat_table.id");
+      $count_forms_criteria['WHERE']["`$form_table`.`$categoryFk`"] = new QueryExpression("`$cat_table`.`id`");
 
       $count1 = new QuerySubQuery($count_forms_criteria);
       $count2 = new QuerySubQuery([
          'COUNT' => 'count',
          'FROM' => 'glpi_knowbaseitems_knowbaseitemcategories',
          'WHERE' => [
-            'knowbaseitems_id' => new QuerySubQuery([
-               'SELECT' => 'faqs.id',
-               'FROM' => (new QuerySubQuery($query_faqs, 'faqs'))
-            ]),
-            [(new QueryExpression("knowbaseitemcategories_id = $cat_table.knowbaseitemcategories_id"))],
+            'knowbaseitems_id' => new QuerySubQuery($query_faqs),
+            [(new QueryExpression("`glpi_knowbaseitems_knowbaseitemcategories`.`knowbaseitemcategories_id` = `$cat_table`.`knowbaseitemcategories_id`"))],
          ]
       ]);
       $request = [