mirror/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2025-01-18 13:02:28 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
mariadb/sql
History
Davi Arnaut 69fbbdc19d Bug#45010: invalid memory reads during parsing some strange statements 
The problem is that the lexer could inadvertently skip over the
end of a query being parsed if it encountered a malformed multibyte
character. A specially crated query string could cause the lexer
to jump up to six bytes past the end of the query buffer. Another
problem was that the laxer could use unfiltered user input as
a signed array index for the parser maps (having upper and lower
bounds 0 and 256 respectively).

The solution is to ensure that the lexer only skips over well-formed
multibyte characters and that the index value of the parser maps
is always a unsigned value.
2009-08-07 23:32:01 -03:00
..
examples Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
share Fix for BUG#18828 - If InnoDB runs out of undo slots, 2009-07-17 14:13:53 +05:30
.cvsignore
add_errmsg
client_settings.h
CMakeLists.txt Merged from 5.0 (enterprise). 2008-12-17 15:01:34 -05:00
custom_conf.h
derror.cc
des_key_file.cc
discover.cc
field.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-09 18:11:21 +02:00
field.h Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-09 18:11:21 +02:00
field_conv.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
filesort.cc BUG#35478: sort_union() returns bad data when sort_buffer_size is hit 2008-07-15 18:13:21 +04:00
frm_crypt.cc
gen_lex_hash.cc Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
gstream.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-09 18:11:21 +02:00
gstream.h
ha_archive.cc Merge 5.0.80 release and 5.0 community. Version left at 5.0.80. 2009-04-14 13:20:13 -04:00
ha_archive.h
ha_berkeley.cc Merge from 5.0 trunk. 2008-07-14 16:16:37 -04:00
ha_berkeley.h
ha_blackhole.cc Bug #35178 INSERT_ID not written to binary log for inserts against BLACKHOLE backed tables 2008-03-19 18:44:50 +02:00
ha_blackhole.h Bug#30294 blackhole engine causes 100% with 2 alter table statements running 2007-11-16 14:46:36 +04:00
ha_federated.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
ha_federated.h Bug #32374 crash with filesort when selecting from federated table and view. 2007-11-30 17:08:00 +04:00
ha_heap.cc type conversions fixed to get rid of warnings 2007-10-23 16:32:05 +05:00
ha_heap.h [pb problem]: ha_heap->clone() fails on windows because of mess with 2007-07-17 19:51:50 +04:00
ha_innodb.cc Fix for BUG#18828 - If InnoDB runs out of undo slots, 2009-07-17 14:13:53 +05:30
ha_innodb.h Fix for BUG#43660- SHOW INDEXES/ANALYZE does NOT update cardinality 2009-04-24 16:33:50 +05:30
ha_myisam.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
ha_myisam.h Bug#28249 Query Cache returns wrong result with concurrent insert / certain lock 2007-07-12 13:29:51 +02:00
ha_myisammrg.cc Bug#41212 crash after race condition between merge table and table_cache evictions 2009-05-27 15:34:21 +05:00
ha_myisammrg.h BUG#26976 - Missing table in merge not noted in related error msg + 2007-06-06 04:42:41 +05:00
ha_ndbcluster.cc Merge chunk from trunk. 2008-07-10 14:47:53 -04:00
ha_ndbcluster.h ha_ndbcluster.h: 2007-11-05 20:18:22 +01:00
ha_ndbcluster_cond.cc fixed warnings and compile errors from the fix for bug 26243 2008-03-29 09:52:16 +02:00
ha_ndbcluster_cond.h Bug#34749: Server crash when using NAME_CONST() with an aggregate function 2008-02-28 14:23:22 +01:00
handler.cc Fix for BUG#18828 - If InnoDB runs out of undo slots, 2009-07-17 14:13:53 +05:30
handler.h Fix for bug#40984: backport fix from 39585 into 5.0 2008-11-25 10:22:02 +04:00
hash_filo.cc
hash_filo.h
hostname.cc
init.cc Bug#26294: library name conflict between MySQL 4.x, 5.0 and Qt 3.3 2008-04-03 11:32:00 -04:00
item.cc Bug#46051: Incorrectly market field caused wrong result. 2009-07-18 18:09:56 +04:00
item.h Backport bug #37348 fix 5.1 --> 5.0. 2009-04-01 16:02:26 +05:00
item_buff.cc
item_cmpfunc.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-09 18:11:21 +02:00
item_cmpfunc.h rollback of bug #40761 fix 2008-12-12 14:59:10 +04:00
item_create.cc Fix mismerge. 2008-04-10 15:55:37 -04:00
item_create.h
item_func.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-09 18:11:21 +02:00
item_func.h Bug#37740 Server crashes on execute statement with full text search and 2009-07-15 15:00:58 +05:30
item_geofunc.cc Bug#38990 Arbitrary data input plus GIS functions causes mysql server crash 2009-04-28 14:47:26 +05:00
item_geofunc.h Bug #31155 gis types in union'd select cause crash. 2007-10-04 12:01:28 +05:00
item_row.cc
item_row.h
item_strfunc.cc Automerge. 2009-06-01 16:42:24 +04:00
item_strfunc.h Bug #44767: invalid memory reads in password() and 2009-05-27 14:20:57 +04:00
item_subselect.cc Bug#46051: Incorrectly market field caused wrong result. 2009-07-16 19:43:46 +04:00
item_subselect.h Bug #31884: Assertion + crash in subquery in the SELECT clause. 2007-10-30 14:27:21 +02:00
item_sum.cc Bug #46080: group_concat(... order by) crashes server when 2009-07-10 15:00:34 +03:00
item_sum.h backported the fix for bug #34773 to 5.0 2008-12-09 20:35:02 +02:00
item_timefunc.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-09 18:11:21 +02:00
item_timefunc.h Bug#42525: TIMEDIFF function 2009-02-06 18:25:08 +01:00
item_uniq.cc
item_uniq.h
key.cc Fixed bug #32556: assert in "using index for group-by" : 2007-11-21 22:56:42 +04:00
lex.h
lex_symbol.h
lock.cc Merge 5.0.80 release and 5.0 community. Version left at 5.0.80. 2009-04-14 13:20:13 -04:00
log.cc BUG#43263 BEGIN skipped in some replicate-do-db cases 2009-05-31 11:26:58 +08:00
log_event.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
log_event.h BUG#37145 Killing a statement doing DDL may log binlog event with error code 1053 2009-03-27 13:19:50 +08:00
Makefile.am Bug#17270 - mysql client tool could not find ../share/charsets folder and fails. 2009-07-31 15:22:02 -04:00
matherr.c
message.h Bug#40280: Message compiler(mc.exe) needed to compile MySQL on windows. 2008-10-23 15:28:53 +02:00
message.mc Bug#40280: Message compiler(mc.exe) needed to compile MySQL on windows. 2008-10-23 15:28:53 +02:00
message.rc Bug#40280: Message compiler(mc.exe) needed to compile MySQL on windows. 2008-10-23 15:28:53 +02:00
mf_iocache.cc
MSG00001.bin Bug#40280: Message compiler(mc.exe) needed to compile MySQL on windows. 2008-10-23 15:28:53 +02:00
my_decimal.cc Bug#37553: MySql Error Compare TimeDiff & Time 2008-11-26 09:28:17 +01:00
my_decimal.h Bug#36023: Incorrect handling of zero length caused an assertion to fail. 2008-04-25 00:39:37 +04:00
my_lock.c
mysql_priv.h Bug #44767: invalid memory reads in password() and 2009-05-27 14:20:57 +04:00
mysqld.cc Bug #27535 Installing Windows service with --defaults-file option - quotation marks issues 2009-08-06 10:24:28 -04:00
mysqld_suffix.h
net_serv.cc Bug #45031: invalid memory reads in my_real_read using protocol 2009-07-28 22:35:55 +04:00
nt_servc.cc Bug #20430 mysqld.exe windows service stuck in "SERVICE_STOP_PENDING" 2008-11-14 02:01:41 +01:00
nt_servc.h Bug #20430 mysqld.exe windows service stuck in "SERVICE_STOP_PENDING" 2008-11-14 02:01:41 +01:00
opt_range.cc Bug #45287: phase 2 : 5.0 64 bit compilation warnings 2009-07-16 15:37:38 +03:00
opt_range.h BUG#36639: subselect.test crashes on 64 bit pentium4 when compiled for valgrind, commit into 5.0 2008-08-25 21:02:54 +04:00
opt_sum.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-09 18:11:21 +02:00
parse_file.cc Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
parse_file.h Bug #40021: Renaming view fails, archived .frm for view is 2008-11-14 21:25:57 +04:00
password.c Bug #44767: invalid memory reads in password() and 2009-05-27 14:20:57 +04:00
procedure.cc
procedure.h Bug #26461: Intrinsic data type bool (1 byte) redefined to BOOL (4 bytes) 2008-03-21 17:23:17 +02:00
protocol.cc auto-merge 2009-03-19 09:44:58 -04:00
protocol.h
records.cc BUG#35478: sort_union() returns bad data when sort_buffer_size is hit 2008-07-15 18:13:21 +04:00
repl_failsafe.cc Merge chunk from trunk. 2008-07-10 14:50:07 -04:00
repl_failsafe.h
set_var.cc Bug #45287: phase 2 : 5.0 64 bit compilation warnings 2009-07-16 15:37:38 +03:00
set_var.h Bug #32223 SETting max_allowed_packet variable 2009-06-19 11:27:19 +02:00
slave.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
slave.h Bug #38694 Race condition in replication thread shutdown 2009-04-28 14:46:07 +03:00
sp.cc Bug #45287: phase 2 : 5.0 64 bit compilation warnings 2009-07-16 15:37:38 +03:00
sp.h
sp_cache.cc
sp_cache.h
sp_head.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
sp_head.h Bug#25058 ignored return codes in memory allocation functions 2008-11-21 17:38:42 +04:00
sp_pcontext.cc Bug#25058 ignored return codes in memory allocation functions 2008-11-21 17:38:42 +04:00
sp_pcontext.h Bug#25058 ignored return codes in memory allocation functions 2008-11-21 17:38:42 +04:00
sp_rcontext.cc Bug#33618 (Crash in sp_rcontext) 2008-01-23 13:26:41 -07:00
sp_rcontext.h Bug#33618 (Crash in sp_rcontext) 2008-01-23 13:26:41 -07:00
spatial.cc Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
spatial.h Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
sql_acl.cc Bug #45287: phase 2 : 5.0 64 bit compilation warnings 2009-07-16 15:37:38 +03:00
sql_acl.h Bug #26461: Intrinsic data type bool (1 byte) redefined to BOOL (4 bytes) 2008-03-21 17:23:17 +02:00
sql_analyse.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
sql_analyse.h Bug #26461: Intrinsic data type bool (1 byte) redefined to BOOL (4 bytes) 2008-03-21 17:23:17 +02:00
sql_array.h Fix for bug #31207: Test "join_nested" shows different strategy on IA64 2007-10-17 20:08:58 +04:00
sql_base.cc Bug #46003 and bug #46034: backported the fixes from azalea. 2009-07-16 15:19:22 +03:00
sql_bitmap.h
sql_cache.cc Merge 5.0.80 release and 5.0 community. Version left at 5.0.80. 2009-04-14 13:20:13 -04:00
sql_cache.h Bug#30087 Set query_cache_size, if the value is too small, get a unclear warning 2008-07-16 16:29:22 -06:00
sql_class.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
sql_class.h Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
sql_client.cc Bug#26664 test suite times out on OS X 64bit 2007-05-24 11:21:27 +02:00
sql_crypt.cc Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
sql_crypt.h
sql_cursor.cc Bug#37956 memory leak and / or crash with geometry and prepared statements! 2008-12-10 18:13:11 +04:00
sql_cursor.h
sql_db.cc BUG#37145 Killing a statement doing DDL may log binlog event with error code 1053 2009-03-27 13:19:50 +08:00
sql_delete.cc Bug #40113: Embedded SELECT inside UPDATE or DELETE can timeout 2009-07-13 18:11:16 +03:00
sql_derived.cc Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
sql_do.cc
sql_error.cc Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
sql_error.h BUG#26976 - Missing table in merge not noted in related error msg + 2007-06-06 04:42:41 +05:00
sql_handler.cc Bug#44151 using handler commands on information_schema tables crashes server 2009-04-17 12:41:15 +05:00
sql_help.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
sql_insert.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
sql_lex.cc Bug#45010: invalid memory reads during parsing some strange statements 2009-08-07 23:32:01 -03:00
sql_lex.h Merge community up to enterprise, thus ending the community-server 2009-05-06 09:06:32 -04:00
sql_list.cc
sql_list.h Bug#38296 (low memory crash with many conditions in a query) 2008-08-11 10:10:00 -06:00
sql_load.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
sql_locale.cc Bug#37575 UCASE fails on monthname 2008-12-23 18:08:04 +04:00
sql_manager.cc
sql_manager.h
sql_map.cc type conversions fixed to avoid warnings on Windows 2007-10-23 14:27:11 +05:00
sql_map.h
sql_olap.cc
sql_parse.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
sql_prepare.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
sql_profile.cc Bug #45287: phase 2 : 5.0 64 bit compilation warnings 2009-07-16 15:37:38 +03:00
sql_profile.h Pull 5.1 treatment of community features into 5.0. 2009-05-05 17:03:23 -04:00
sql_rename.cc BUG#37145 Killing a statement doing DDL may log binlog event with error code 1053 2009-03-27 13:19:50 +08:00
sql_repl.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
sql_repl.h BUG#31024: STOP SLAVE does not stop attempted connect()s 2008-03-11 14:42:54 +01:00
sql_select.cc Automerge. 2009-07-24 16:13:31 +04:00
sql_select.h Bug #46003 and bug #46034: backported the fixes from azalea. 2009-07-16 15:19:22 +03:00
sql_show.cc Bug #38816: kill + flush tables with read lock + stored 2009-07-24 20:58:58 +05:00
sql_sort.h Fixed bug #25798. 2007-07-01 15:33:28 -07:00
sql_state.c
sql_string.cc auto-merge 2009-03-19 09:44:58 -04:00
sql_string.h Bug#38296 (low memory crash with many conditions in a query) 2008-08-11 10:10:00 -06:00
sql_table.cc Merge from 5.0-bt 2009-06-29 15:17:01 +02:00
sql_test.cc
sql_trigger.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
sql_trigger.h A fix and a test case for Bug#26141 mixing table types in trigger 2007-07-12 22:26:41 +04:00
sql_udf.cc Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
sql_udf.h Remove typedef st_table_list TABLE_LIST and always use name 'TABLE_LIST'. 2007-07-06 16:18:49 +04:00
sql_union.cc Bug#43612 crash with explain extended, union, order by 2009-05-15 12:03:34 +05:00
sql_update.cc Bug #40113: Embedded SELECT inside UPDATE or DELETE can timeout 2009-07-13 18:11:16 +03:00
sql_view.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
sql_view.h Bug#32890 Crash after repeated create and drop of tables and views 2008-02-21 14:58:29 -03:00
sql_yacc.yy Bug #45287: phase 2 : 5.0 64 bit compilation warnings 2009-07-16 15:37:38 +03:00
stacktrace.c Bug#35987 - post-review fix 2008-09-16 13:16:41 +02:00
stacktrace.h Bug#31745 - crash handler does not work on Windows 2008-02-19 12:37:39 +01:00
strfunc.cc
structs.h Merge from Tim's 5.0.76-release tree to make 5.0.77 . 2009-01-21 13:45:23 -05:00
table.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
table.h Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
thr_malloc.cc Merge from 5.0-bt 2009-06-29 15:17:01 +02:00
time.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
tzfile.h
tztime.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
tztime.h Bug #39920: MySQL cannot deal with Leap Second expression in string literal. 2008-12-01 16:18:35 +02:00
udf_example.c Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
udf_example.def Bug #29804 UDF parameters don't contain correct string length 2007-10-17 17:54:11 -04:00
uniques.cc Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-06-17 15:54:01 +02:00
unireg.cc Bug#29125 Windows Server X64: so many compiler warnings 2009-02-10 17:47:54 -05:00
unireg.h Bug#17270 - mysql client tool could not find ../share/charsets folder and fails. 2009-07-31 15:22:02 -04:00
watchdog_mysqld