summaryrefslogtreecommitdiff
path: root/strings/int2str.c
diff options
context:
space:
mode:
authorGeorgi Kodinov <Georgi.Kodinov@Oracle.com>2012-07-05 13:41:16 +0300
committerGeorgi Kodinov <Georgi.Kodinov@Oracle.com>2012-07-05 13:41:16 +0300
commit4b498c9a53b48318d103bb44d756b9ca915d3101 (patch)
tree091a241c2df3f614399530ce23b358c319d7c65c /strings/int2str.c
parentb2c19cfeeabad3888e4d6269005fd364a3fcf7d6 (diff)
downloadmariadb-git-4b498c9a53b48318d103bb44d756b9ca915d3101.tar.gz
Bug #13889741: HANDLE_FATAL_SIGNAL IN _DB_ENTER_ |
HANDLE_FATAL_SIGNAL IN STRNLEN Fixed the following bounds checking problems : 1. in check_if_legal_filename() make sure the null terminated string is long enough before accessing the bytes in it. Prevents pottential read-past-buffer-end 2. in my_wc_mb_filename() of the filename charset check for the end of the destination buffer before sending single byte characters into it. Prevents write-past-end-of-buffer (and garbaling stack in the cases reported here) errors. Added test cases.
Diffstat (limited to 'strings/int2str.c')
0 files changed, 0 insertions, 0 deletions