diff options
| author | Kristian Nielsen <knielsen@odin> | 2010-04-28 07:48:03 +0200 |
|---|---|---|
| committer | Kristian Nielsen <knielsen@odin> | 2010-04-28 07:48:03 +0200 |
| commit | c805d9bc0b127e1126eeb7814d5ff5d66a539b47 (patch) | |
| tree | 5a0058c047e53644b525b705ead0fb6cda653c7a /scripts/mysqld_multi.sh | |
| parent | 72b347bc6d25c7527e9b4061e9a9c068a3cc0913 (diff) | |
| download | mariadb-git-c805d9bc0b127e1126eeb7814d5ff5d66a539b47.tar.gz | |
Fix buffer overflow in COM_FIELD_LIST.
sql/sql_base.cc:
Replace strmov() with strnmov() to remove the possibility for buffer overflow.
sql/sql_parse.cc:
Reject COM_FIELD_LIST with too-big table or wildcard argument.
(libmysqlclient doesn't allow sending too long arguments anyway, but we
need this to protect against buffer overflow exploits).
Diffstat (limited to 'scripts/mysqld_multi.sh')
0 files changed, 0 insertions, 0 deletions