diff options
| author | unknown <mats@kindahl-laptop.dnsalias.net> | 2007-11-08 08:54:19 +0100 |
|---|---|---|
| committer | unknown <mats@kindahl-laptop.dnsalias.net> | 2007-11-08 08:54:19 +0100 |
| commit | 10397af9c519b8238599a1ff9fed0d3e871c50e7 (patch) | |
| tree | 0829eb1d0574e5ef45d0fde980cee5ae7110bc07 /mysql-test/r/mysqlbinlog.result | |
| parent | af48b26ed8b369e80968df581cf395c572d35be2 (diff) | |
| parent | cda4afc2bfbd508ab189eedb1c0dfbe4861533b4 (diff) | |
| download | mariadb-git-10397af9c519b8238599a1ff9fed0d3e871c50e7.tar.gz | |
Merge kindahl-laptop.dnsalias.net:/home/bkroot/mysql-5.1
into kindahl-laptop.dnsalias.net:/home/bk/b31611-mysql-5.1-target-5.1.22
sql/sql_binlog.cc:
Auto merged
Diffstat (limited to 'mysql-test/r/mysqlbinlog.result')
| -rw-r--r-- | mysql-test/r/mysqlbinlog.result | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/mysql-test/r/mysqlbinlog.result b/mysql-test/r/mysqlbinlog.result index f10ae4b4df5..287fbd7e7f3 100644 --- a/mysql-test/r/mysqlbinlog.result +++ b/mysql-test/r/mysqlbinlog.result @@ -328,4 +328,26 @@ drop table t1; drop table t1; End of 5.0 tests flush logs; +BUG#31611: Security risk with BINLOG statement +SET BINLOG_FORMAT=ROW; +CREATE DATABASE mysqltest1; +CREATE USER untrusted@localhost; +GRANT SELECT ON mysqltest1.* TO untrusted@localhost; +SHOW GRANTS FOR untrusted@localhost; +Grants for untrusted@localhost +GRANT USAGE ON *.* TO 'untrusted'@'localhost' +GRANT SELECT ON `mysqltest1`.* TO 'untrusted'@'localhost' +USE mysqltest1; +CREATE TABLE t1 (a INT, b CHAR(64)); +flush logs; +INSERT INTO t1 VALUES (1,USER()); +flush logs; +mysqlbinlog var/log/master-bin.000017 > var/tmp/bug31611.sql +mysql mysqltest1 -uuntrusted < var/tmp/bug31611.sql +INSERT INTO t1 VALUES (1,USER()); +ERROR 42000: INSERT command denied to user 'untrusted'@'localhost' for table 't1' +SELECT * FROM t1; +a b +1 root@localhost +DROP DATABASE mysqltest1; End of 5.1 tests |