diff options
author | Georgi Kodinov <Georgi.Kodinov@Oracle.com> | 2012-07-05 13:41:16 +0300 |
---|---|---|
committer | Georgi Kodinov <Georgi.Kodinov@Oracle.com> | 2012-07-05 13:41:16 +0300 |
commit | 4b498c9a53b48318d103bb44d756b9ca915d3101 (patch) | |
tree | 091a241c2df3f614399530ce23b358c319d7c65c /strings/int2str.c | |
parent | b2c19cfeeabad3888e4d6269005fd364a3fcf7d6 (diff) | |
download | mariadb-git-4b498c9a53b48318d103bb44d756b9ca915d3101.tar.gz |
Bug #13889741: HANDLE_FATAL_SIGNAL IN _DB_ENTER_ |
HANDLE_FATAL_SIGNAL IN STRNLEN
Fixed the following bounds checking problems :
1. in check_if_legal_filename() make sure the null terminated
string is long enough before accessing the bytes in it.
Prevents pottential read-past-buffer-end
2. in my_wc_mb_filename() of the filename charset check
for the end of the destination buffer before sending single
byte characters into it.
Prevents write-past-end-of-buffer (and garbaling stack in
the cases reported here) errors.
Added test cases.
Diffstat (limited to 'strings/int2str.c')
0 files changed, 0 insertions, 0 deletions