1. 09 Oct, 2006 1 commit
    • cmiller@zippy.cornsilk.net's avatar
      Bug#17583: mysql drops connection when stdout is not writable · 4812d81e
      cmiller@zippy.cornsilk.net authored
      When the client program had its stdout file descriptor closed by the calling
      shell, after some amount of work (enough to fill a socket buffer) the server 
      would complain about a packet error and then disconnect the client.
      
      This is a serious security problem.  If stdout is closed before the mysql is
      exec()d, then the first socket() call allocates file number 1 to communicate
      with the server.  Subsequent write()s to that file number (as when printing
      results that come back from the database) go back to the server instead in 
      the command channel.  So, one should be able to craft data which, upon being
      selected back from the server to the client, and injected into the command
      stream become valid MySQL protocol to do something nasty when sent /back/ to 
      the server.
      
      The solution is to close explicitly the file descriptor that we *printf() to, 
      so that the libc layer and the OS layer both agree that the file is closed.
      4812d81e
  2. 03 Oct, 2006 1 commit
  3. 28 Sep, 2006 1 commit
  4. 27 Sep, 2006 2 commits
  5. 25 Sep, 2006 3 commits
  6. 24 Sep, 2006 1 commit
  7. 23 Sep, 2006 2 commits
  8. 21 Sep, 2006 2 commits
  9. 20 Sep, 2006 3 commits
  10. 19 Sep, 2006 2 commits
  11. 18 Sep, 2006 2 commits
  12. 16 Sep, 2006 1 commit
    • igor@rurik.mysql.com's avatar
      Fixed bug #22085: Crash on the execution of a prepared · dd3b8e4f
      igor@rurik.mysql.com authored
      statement that uses an aggregating IN subquery with 
      HAVING clause.
      A wrong order of the call of split_sum_func2 for the HAVING
      clause of the subquery and the transformation for the 
      subquery resulted in the creation of a andor structure
      that could not be restored at an execution of the prepared
      statement.
      dd3b8e4f
  13. 15 Sep, 2006 3 commits
  14. 14 Sep, 2006 4 commits
  15. 12 Sep, 2006 2 commits
  16. 11 Sep, 2006 1 commit
  17. 08 Sep, 2006 1 commit
  18. 07 Sep, 2006 3 commits
  19. 06 Sep, 2006 1 commit
  20. 05 Sep, 2006 3 commits
  21. 04 Sep, 2006 1 commit
    • gkodinov/kgeorge@macbook.gmz's avatar
      Bug #21392: multi-table delete with alias table name fails with · 3758b975
      gkodinov/kgeorge@macbook.gmz authored
                  1003: Incorrect table name
      in multi-table DELETE the set of tables to delete from actually 
      references then tables in the other list, e.g:
      DELETE alias_of_t1 FROM t1 alias_of_t1 WHERE ....
      is a valid statement.
      So we must turn off table name syntactical validity check for alias_of_t1 
      because it's not a table name (even if it looks like one).
      In order to do that we add a special flag (TL_OPTION_ALIAS) to 
      disable the name checking for the aliases in multi-table DELETE.
      3758b975