diff options
| author | Marcin Babij <marcin.babij@oracle.com> | 2014-06-27 11:27:27 +0200 |
|---|---|---|
| committer | Marcin Babij <marcin.babij@oracle.com> | 2014-06-27 11:27:27 +0200 |
| commit | 3b7f990b136352fa4e0e8673963d1a034dd1ac43 (patch) | |
| tree | ae1a299b1716c636fb370c1adc89cfe1196ba15a /client/mysqlshow.c | |
| parent | 18fa87d41aa089e5b0ec497f753cdfd999873a89 (diff) | |
| download | mariadb-git-3b7f990b136352fa4e0e8673963d1a034dd1ac43.tar.gz | |
BUG#18779944: MYSQLDUMP BUFFER OVERFLOW
Mysqldump overflows stack buffer when copying table name from commandline arguments resulting in stack corruption and ability to execute arbitrary code.
Fix: Check length of all positional arguments passed to mysqldump is smaller than NAME_LEN.
Note: Mysqldump heavily depends on that database objects (databases, tablespaces, tables, etc) are limited to small size (now it is 64).
Diffstat (limited to 'client/mysqlshow.c')
0 files changed, 0 insertions, 0 deletions