diff options
| author | Marcin Babij <marcin.babij@oracle.com> | 2014-06-27 11:27:27 +0200 |
|---|---|---|
| committer | Marcin Babij <marcin.babij@oracle.com> | 2014-06-27 11:27:27 +0200 |
| commit | 220c9332bf057bc75e1eae490bb3a68c2d7c3341 (patch) | |
| tree | ae1a299b1716c636fb370c1adc89cfe1196ba15a /Docs/glibc-2.2.5.patch | |
| parent | 5111df08146bcc9f233edada7eecdb1457b09d59 (diff) | |
| download | mariadb-git-220c9332bf057bc75e1eae490bb3a68c2d7c3341.tar.gz | |
BUG#18779944: MYSQLDUMP BUFFER OVERFLOW
Mysqldump overflows stack buffer when copying table name from commandline arguments resulting in stack corruption and ability to execute arbitrary code.
Fix: Check length of all positional arguments passed to mysqldump is smaller than NAME_LEN.
Note: Mysqldump heavily depends on that database objects (databases, tablespaces, tables, etc) are limited to small size (now it is 64).
Diffstat (limited to 'Docs/glibc-2.2.5.patch')
0 files changed, 0 insertions, 0 deletions