savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindow_func=true for a subquery.