- 09 Oct, 2006 2 commits
-
-
cmiller@zippy.cornsilk.net authored
into zippy.cornsilk.net:/home/cmiller/work/mysql/bug17583/my41-bug17583
-
cmiller@zippy.cornsilk.net authored
When the client program had its stdout file descriptor closed by the calling shell, after some amount of work (enough to fill a socket buffer) the server would complain about a packet error and then disconnect the client. This is a serious security problem. If stdout is closed before the mysql is exec()d, then the first socket() call allocates file number 1 to communicate with the server. Subsequent write()s to that file number (as when printing results that come back from the database) go back to the server instead in the command channel. So, one should be able to craft data which, upon being selected back from the server to the client, and injected into the command stream become valid MySQL protocol to do something nasty when sent /back/ to the server. The solution is to close explicitly the file descriptor that we *printf() to, so that the libc layer and the OS layer both agree that the file is closed.
-
- 04 Oct, 2006 1 commit
-
-
iggy@rolltop.ignatz42.dyndns.org authored
into rolltop.ignatz42.dyndns.org:/mnt/storeage/mysql-4.1-maint
-
- 03 Oct, 2006 8 commits
-
-
iggy@rolltop.ignatz42.dyndns.org authored
-
msvensson@neptunus.(none) authored
into neptunus.(none):/home/msvensson/mysql/mysql-4.1-maint
-
msvensson@neptunus.(none) authored
into neptunus.(none):/home/msvensson/mysql/mysql-4.1-maint
-
msvensson@neptunus.(none) authored
into neptunus.(none):/home/msvensson/mysql/mysql-4.1-maint
-
msvensson@neptunus.(none) authored
into neptunus.(none):/home/msvensson/mysql/mysql-4.1-maint
-
msvensson@shellback.(none) authored
into shellback.(none):/home/msvensson/mysql/mysql-4.1-maint
-
into mysql.com:/usr/home/bar/mysql-4.1-rpl
-
dlenev@mockturtle.local authored
into mockturtle.local:/home/dlenev/src/mysql-4.1-rt-merge
-
- 02 Oct, 2006 13 commits
-
-
msvensson@shellback.(none) authored
into shellback.(none):/home/msvensson/mysql/mysql-4.1-maint
-
msvensson@shellback.(none) authored
This was available from gcc 3.1, so diable it before that Update m_ctype.h to use the new macro
-
tsmith/tim@siva.hindu.god authored
into siva.hindu.god:/usr/home/tim/m/bk/41
-
tsmith/tim@siva.hindu.god authored
into siva.hindu.god:/usr/home/tim/m/bk/41
-
tsmith/tim@siva.hindu.god authored
into siva.hindu.god:/usr/home/tim/m/bk/40
-
msvensson@neptunus.(none) authored
-
msvensson@neptunus.(none) authored
When compiling with qcc on QNC the define __GNUC__will be set although it doesn't support full GNU syntax - disable __attribute__ when using qcc
-
msvensson@neptunus.(none) authored
-
msvensson@neptunus.(none) authored
-
msvensson@neptunus.(none) authored
into neptunus.(none):/home/msvensson/mysql/mysql-4.1-maint
-
msvensson@neptunus.(none) authored
into neptunus.(none):/home/msvensson/mysql/mysql-4.1-maint
-
svoj@mysql.com/april.(none) authored
into mysql.com:/home/svoj/devel/mysql/merge/mysql-4.1-engines
-
svoj@mysql.com/april.(none) authored
into mysql.com:/home/svoj/devel/mysql/merge/mysql-4.1-engines
-
- 30 Sep, 2006 3 commits
-
-
jimw@rama.(none) authored
into rama.(none):/home/jimw/my/mysql-4.1-clean
-
jimw@rama.(none) authored
-
jimw@rama.(none) authored
into rama.(none):/home/jimw/my/mysql-4.1-clean
-
- 29 Sep, 2006 5 commits
-
-
cmiller@zippy.cornsilk.net authored
into zippy.cornsilk.net:/home/cmiller/work/mysql/mysql-4.1-maint
-
istruewing@chilla.local authored
into chilla.local:/home/mydev/mysql-4.0-bug20719
-
istruewing@chilla.local authored
into chilla.local:/home/mydev/mysql-4.1-bug22384
-
svoj@mysql.com/april.(none) authored
-
jimw@rama.(none) authored
into rama.(none):/home/jimw/my/mysql-4.1-clean
-
- 28 Sep, 2006 8 commits
-
-
iggy@rolltop.ignatz42.dyndns.org authored
into rolltop.ignatz42.dyndns.org:/mnt/storeage/mysql-4.1-maint
-
dlenev@mockturtle.local authored
create_tmp_table()". The fix for bug 21787 "COUNT(*) + ORDER BY + LIMIT returns wrong result" introduced valgrind warnings which occured during execution of information_schema.test and sp-prelocking.test in version 5.0. There were no user visible effects. The latter fix made create_tmp_table() dependant on THD::lex::current_select value. Valgrind warnings occured when this function was executed and THD::lex::current_select member pointed to uninitialized SELECT_LEX instance. This fix tries to remove this dependancy by moving some logic outside of create_tmp_table() function.
-
istruewing@chilla.local authored
into chilla.local:/home/mydev/mysql-4.1-bug22384
-
iggy@rolltop.ignatz42.dyndns.org authored
-
svoj@mysql.com/april.(none) authored
into mysql.com:/home/svoj/devel/mysql/BUG21617/mysql-4.1-engines
-
svoj@mysql.com/april.(none) authored
Crash may happen when selecting from a merge table that has underlying tables with less indexes than in a merge table itself. If number of keys in merge table is not bigger than requested key number, return error.
-
cmiller@zippy.cornsilk.net authored
into zippy.cornsilk.net:/home/cmiller/work/mysql/mysql-4.1-maint
-
istruewing@chilla.local authored
into chilla.local:/home/mydev/mysql-4.1-bug20719-m
-