• Marko Mäkelä's avatar
    MDEV-29409 Buffer overflow in my_wc_mb_filename() on RENAME TABLE · 422f3204
    Marko Mäkelä authored
    dict_table_rename_in_cache(), dict_table_get_highest_foreign_id():
    Reserve sufficient space for the fkid[] buffer, and ensure that the
    fkid[] will be NUL-terminated.
    
    The fkid[] must accommodate both the database name (which is already
    encoded in my_charset_filename) and the constraint name
    (which must be converted to my_charset_filename) so that we can check
    if it is in the format databasename/tablename_ibfk_1 (all encoded in
    my_charset_filename).
    422f3204
dict0dict.cc 176 KB