• Mats Kindahl's avatar
    BUG#58246: INSTALL PLUGIN not secure & crashable · 91a4a8ab
    Mats Kindahl authored
    When installing plugins, there is a missing check
    for slash (/) in the path on Windows. Note that on
    Windows, both / and \ can be used to separate
    directories.
    
    This patch fixes the issue by:
    - Adding a FN_DIRSEP symbol for all platforms
      consisting of a string of legal directory
      separators.
    - Adding a charset-aware version of strcspn().
    - Adding a check_valid_path() function that uses
      my_strcspn() to check if any FN_DIRSEP character
      is in the supplied string.
    - Using the check_valid_path() function in
      sql_plugin.cc and sql_udf.cc (which means
      replacing the existing test there).
    91a4a8ab
sql_plugin.h 5.31 KB