DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql type cast svpv.

When casting to SQL NUMERIC, sql type cast svpv passes the string pointer and length of the SV to grok number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok number reads from an invalid address, triggering a segmentation fault.

This is reachable in Perl using the sql type cast function:

my $num = 42; DBI::sql type cast( $num, DBI::SQL NUMERIC, 0 );