diff options
| author | Marcin Babij <marcin.babij@oracle.com> | 2014-07-02 10:45:22 +0200 |
|---|---|---|
| committer | Marcin Babij <marcin.babij@oracle.com> | 2014-07-02 10:45:22 +0200 |
| commit | 43268d20e747f4e4194ea26f7fecc434e0ebf550 (patch) | |
| tree | f6f4a1be9d689085631efa0548f37f1011cfb2d3 /.bzrignore | |
| parent | edc029442c4f720d5fb921bbabd26f8d5e30ffbe (diff) | |
| download | mariadb-git-43268d20e747f4e4194ea26f7fecc434e0ebf550.tar.gz | |
BUG#18779944: MYSQLDUMP BUFFER OVERFLOW
Mysqldump overflows stack buffer when copying table name from commandline arguments resulting in stack corruption and ability to execute arbitrary code.
Fix: Check length of all positional arguments passed to mysqldump is smaller than NAME_LEN.
Note: Mysqldump heavily depends on that database objects (databases, tablespaces, tables, etc) are limited to small size (now it is 64).
Diffstat (limited to '.bzrignore')
0 files changed, 0 insertions, 0 deletions