From ed423748931068d3cb7b8980f19fa0cbfc689053 Mon Sep 17 00:00:00 2001
From: Minglei Jin <mljin@taosdata.com>
Date: Wed, 28 Jul 2021 11:14:20 +0800
Subject: [PATCH] tsim/nchar-binary: fix negative length crash

---
 tests/tsim/src/simExe.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tests/tsim/src/simExe.c b/tests/tsim/src/simExe.c
index c5b8d5c5eb..c29593b6ef 100644
--- a/tests/tsim/src/simExe.c
+++ b/tests/tsim/src/simExe.c
@@ -808,6 +808,11 @@ bool simExecuteNativeSqlCommand(SScript *script, char *rest, bool isSlow) {
               break;
             case TSDB_DATA_TYPE_BINARY:
             case TSDB_DATA_TYPE_NCHAR:
+              if (length[i] < 0 || length[i] > 1 << 20) {
+                fprintf(stderr, "Invalid length(%d) of BINARY or NCHAR\n", length[i]);
+                exit(-1);
+              }
+
               memset(value, 0, MAX_QUERY_VALUE_LEN);
               memcpy(value, row[i], length[i]);
               value[length[i]] = 0;