diff options
| author | unknown <davi@mysql.com/endora.local> | 2007-11-26 14:09:37 -0200 |
|---|---|---|
| committer | unknown <davi@mysql.com/endora.local> | 2007-11-26 14:09:37 -0200 |
| commit | b8a19c228ce93ff5e57d7d122d8d5a74236670f6 (patch) | |
| tree | ebe3deadd9d167d5629d6924246b48d5cf7cd802 /include/mysql.h | |
| parent | a8b4bc8165ef531a5a0323bffd5da01b9c020481 (diff) | |
| download | mariadb-git-b8a19c228ce93ff5e57d7d122d8d5a74236670f6.tar.gz | |
Bug#29592 SQL Injection issue
Remove the mysql_odbc_escape_string() function. The function
has multi-byte character escaping issues, doesn't honor the
NO_BACKSLASH_ESCAPES mode and is not used anymore by the
Connector/ODBC as of 3.51.17.
include/mysql.h:
Remove mysql_odbc_escape_string() prototype.
include/mysql_h.ic:
Update abi check file, mostly line changes and mysql_odbc_escape_string
removal.
libmysql/libmysql.c:
Remove mysql_odbc_escape_string() body.
libmysql/libmysql.def:
Remove mysql_odbc_escape_string()
libmysqld/libmysqld.def:
Remove mysql_odbc_escape_string()
Diffstat (limited to 'include/mysql.h')
| -rw-r--r-- | include/mysql.h | 10 |
1 files changed, 0 insertions, 10 deletions
diff --git a/include/mysql.h b/include/mysql.h index b3e0dc45496..f2303abb241 100644 --- a/include/mysql.h +++ b/include/mysql.h @@ -550,16 +550,6 @@ unsigned long STDCALL mysql_real_escape_string(MYSQL *mysql, char *to,const char *from, unsigned long length); void STDCALL mysql_debug(const char *debug); -char * STDCALL mysql_odbc_escape_string(MYSQL *mysql, - char *to, - unsigned long to_length, - const char *from, - unsigned long from_length, - void *param, - char * - (*extend_buffer) - (void *, char *to, - unsigned long *length)); void STDCALL myodbc_remove_escape(MYSQL *mysql,char *name); unsigned int STDCALL mysql_thread_safe(void); my_bool STDCALL mysql_embedded(void); |