libmysql_crash_test.c

#include <stdlib.h>
#include <string.h>
#include <mysql.h>

int main() {
  MYSQL *client;
  MYSQL_RES *result;
  int err;
  char *query = "SELECT 1";

  client = mysql_init(NULL);
  client = mysql_real_connect(client, "127.0.0.1",
                              "root", NULL,
                              NULL, 13306, "/opt/boxen/data/mysql/socket",
                              0);


  err = mysql_real_query(client, query, strlen(query));
  result = mysql_use_result(client);

  mysql_close(client);
  result->handle = (void*)1; // this line is the key, can't be NULL but has been freed
  mysql_free_result(result);

  return 0;
}