MariaDB server is a community developed fork of MySQL server. Started by core members of the original MySQL team, MariaDB actively works with outside developers to deliver the most featureful, stable, and sanely licensed open SQL server in the industry.
Find a file
unknown 2d5a444d1f Fix for Bug #27944 Filtering THD::client capabilities
The server used to trust blindly information from the client about
its capabilities. During the connection handshake the server sends
information about what it supports and then the client sends back a
set of capabilities which cover all of the server's or less.
Before this changeset the server didn't check whether the flags sent
by the client were valid for the server. For example, if the server
doesn't support compressed protocol but the client does and sends that
bit turned on, the server didn't check it. The change make the server code
less error prone to problems related to the value of THD::client_capabilities.

Clearly there is no vulnerability being fixed but this is a maintainenance
fix to prevent misusage in the future.


include/mysql_com.h:
  List all CLIENT flags in a common defition. Add also a definition
  which excludes flags, which are optoinal.
sql/sql_connect.cc:
  Renamed client_flags to server_capabilities to reflect what
  the server supports. Only allow from the client the flags the
  server supports.
2008-03-25 18:18:58 +02:00
BitKeeper Merge trift2.:/MySQL/M51/mysql-5.1 2008-01-28 15:16:40 +01:00
BUILD Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
client Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
cmd-line-utils Merge pippilotta.erinye.com:/shared/home/df/mysql/build/mysql-5.0-build 2008-01-23 17:43:46 +01:00
config/ac-macros ha_ndbcluster.m4: 2008-02-12 19:08:04 +01:00
dbug Bug#34424 query_cache_debug.test leads to valgrind warnings 2008-02-26 12:03:59 -03:00
Docs ReadMe.txt, INSTALL-WIN-SOURCE, INSTALL-BINARY, INSTALL-SOURCE: 2007-11-23 10:15:55 +01:00
extra Merge bk-internal.mysql.com:/home/bk/mysql-5.1-build 2008-02-21 19:53:37 -05:00
include Fix for Bug #27944 Filtering THD::client capabilities 2008-03-25 18:18:58 +02:00
libmysql Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
libmysql_r Makefile.am: 2007-10-08 20:55:44 +02:00
libmysqld Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
man my_strtoll10-x86.s: 2006-12-31 01:02:27 +01:00
mysql-test Merge dl145h.mysql.com:/data0/mkindahl/mysql-5.1 2008-03-14 18:32:01 +01:00
mysys Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
netware Merge trift2.:/MySQL/M50/merge-5.0 2007-12-21 13:13:22 +01:00
plugin Makefile.am: 2007-09-26 18:47:55 +02:00
pstack Makefile.am, configure.in: 2007-09-27 21:39:23 +02:00
regex Fix for server bug experienced in Maria (wrong "Truncated incorrect <var_name> 2008-02-18 23:29:39 +01:00
scripts Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
server-tools Bug#34655 Compile error 2008-02-28 14:55:46 -03:00
sql Fix for Bug #27944 Filtering THD::client capabilities 2008-03-25 18:18:58 +02:00
sql-bench Fixed compiler warnings 2007-02-23 13:13:55 +02:00
sql-common Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
storage Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
strings Merge dl145h.mysql.com:/data0/mkindahl/mysql-5.0-rpl 2008-02-20 19:49:26 +01:00
support-files Merge trift2.:/MySQL/M51/mysql-5.1 2008-02-22 16:14:27 +01:00
tests Bug#35103 mysql_client_test::test_bug29948 causes sporadic failures 2008-03-13 12:14:14 +03:00
unittest Fix for server bug experienced in Maria (wrong "Truncated incorrect <var_name> 2008-02-18 23:29:39 +01:00
vio Merge bk-internal.mysql.com:/home/bk/mysql-5.1-build 2008-02-21 19:53:37 -05:00
win Merge ramayana.hindu.god:/home/tsmith/m/bk/51 2007-09-28 10:55:28 -06:00
zlib CMakeLists.txt, README, configure.js 2007-08-03 21:51:37 +02:00
.bzrignore Patch for bug#32664: event.test has timeout randomly. File is split into event_1.test and event_2.test. 2008-02-20 14:40:46 +01:00
.cvsignore Import changeset 2000-07-31 21:29:14 +02:00
CMakeLists.txt Merge alf.(none):/src/bug31319/my50-bug31319 2007-11-02 15:17:37 -04:00
configure.in Merge kaamos.(none):/data/src/mysql-5.1 2008-03-12 11:19:46 +03:00
COPYING - manual.texi will be replaced with a manual written in DocBook/XML. This ChangeSet removes all 2005-04-13 11:51:38 +02:00
EXCEPTIONS-CLIENT EXCEPTIONS-CLIENT: 2007-03-14 18:28:16 +01:00
INSTALL-SOURCE ReadMe.txt, INSTALL-WIN-SOURCE, INSTALL-BINARY, INSTALL-SOURCE: 2007-11-23 10:15:55 +01:00
INSTALL-WIN-SOURCE ReadMe.txt, INSTALL-WIN-SOURCE, INSTALL-BINARY, INSTALL-SOURCE: 2007-11-23 10:15:55 +01:00
Makefile.am Merge debian.(none):/MySQL/M51/indent-5.1 2007-12-11 20:50:09 +01:00
README make_binary_distribution.sh: 2006-11-07 22:26:37 +01:00

This is a release of MySQL, a dual-license SQL database server.
MySQL is brought to you by the MySQL team at MySQL AB.

License information can be found in these files:
- For GPL (free) distributions, see the COPYING file and
  the EXCEPTIONS-CLIENT file.
- For commercial distributions, see the LICENSE.mysql file.


For further information about MySQL or additional documentation, see:
- The latest information about MySQL: http://www.mysql.com
- The current MySQL documentation: http://dev.mysql.com/doc

Some manual sections of special interest:

- If you are migrating from an older version of MySQL, please read the
  "Upgrading from..." section first!
- To see what MySQL can do, take a look at the features section.
- For installation instructions, see the Installing and Upgrading chapter.
- For the new features/bugfix history, see the Change History appendix.
- For the currently known bugs/misfeatures (known errors) see the Problems
  and Common Errors appendix.
- For a list of developers and other contributors, see the Credits
  appendix.

A local copy of the MySQL Reference Manual can be found in the Docs
directory in GNU Info format.  You can also browse the manual online or
download it in any of several formats at the URL given earlier in this
file.

************************************************************

IMPORTANT:

Bug or error reports should be sent to http://bugs.mysql.com.