MariaDB server is a community developed fork of MySQL server. Started by core members of the original MySQL team, MariaDB actively works with outside developers to deliver the most featureful, stable, and sanely licensed open SQL server in the industry.
Find a file
Ramil Kalimullin 495810cd1f Fix for bug#50227: Pre-auth buffer-overflow in mySQL through yaSSL
Problem: copying issuer's (or subject's) name tags into an internal
buffer from incoming stream we didn't check the buffer overflow. 
That may lead to memory overrun, crash etc.

Fix: ensure we don't overrun the buffer.

Note: there's no simple test case (exploit needed).


extra/yassl/taocrypt/include/asn.hpp:
  Fix for bug#50227: Pre-auth buffer-overflow in mySQL through yaSSL
    - CertDecoder::AddTag() introduced.
extra/yassl/taocrypt/src/asn.cpp:
  Fix for bug#50227: Pre-auth buffer-overflow in mySQL through yaSSL
    - copying data from incoming stream to the issuer_ or subject_
  buffers ensure we don't overrun them.
    - code cleanup.
2010-01-13 09:20:45 +04:00
.bzr-mysql version change 2009-11-04 11:13:55 +02:00
bdb Tool fix, needed for "compile-dist" to succeed on Solaris: 2009-01-13 14:52:22 +01:00
BitKeeper Merge community up to enterprise, thus ending the community-server 2009-05-06 09:06:32 -04:00
BUILD fixed the CPU checking code. 2009-07-10 16:00:17 +03:00
client Bug#48983: Bad strmake calls (length one too long) 2009-12-17 15:58:38 -02:00
cmd-line-utils Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-08-28 17:51:31 +02:00
config/ac-macros Fix for Bug#40700: aclocal warnings for missing cache-id's 2009-11-04 15:34:42 -07:00
dbug Bug #45287: phase 2 : 5.0 64 bit compilation warnings 2009-07-16 15:37:38 +03:00
Docs Makefile.am, configure.in: 2007-11-22 17:48:40 +01:00
extra Fix for bug#50227: Pre-auth buffer-overflow in mySQL through yaSSL 2010-01-13 09:20:45 +04:00
heap Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-09-17 17:10:30 +02:00
include Fix for Bug#37408 - Compressed MyISAM files should not require/use mmap() 2009-12-17 16:55:50 +05:30
innobase Bug #38883 (reopened): thd_security_context is not thread safe, crashes? 2009-12-01 14:24:44 +04:00
libmysql Bug#48983: Bad strmake calls (length one too long) 2009-12-17 15:58:38 -02:00
libmysql_r my_strtoll10-x86.s: 2006-12-31 01:02:27 +01:00
libmysqld Bug#48983: Bad strmake calls (length one too long) 2009-12-17 15:58:38 -02:00
man Get rid of manual pages which aren't used. 2009-08-20 21:08:09 +02:00
myisam Bug#49898 - Fix for bug#37408 introduces a linker error 2009-12-24 12:02:29 +05:30
myisammrg Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-08-28 17:51:31 +02:00
mysql-test Bug #49137 Replication failure on SBR/MBR + multi-table DROP TEMPORARY TABLE 2009-12-31 11:33:10 +08:00
mysys Bug#48983: Bad strmake calls (length one too long) 2009-12-17 15:58:38 -02:00
ndb Bug#44952: Ndbd file system inconsistency error 2009-11-02 18:10:21 -02:00
netware Handle renamed nwbootstrap -> nwbuild 2009-02-06 15:07:45 +01:00
os2 Avoid the name conflict between the system-provided "md5.h" and the MySQL one 2007-07-19 14:14:03 +02:00
pstack my_strtoll10-x86.s: 2006-12-31 01:02:27 +01:00
regex Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-08-28 17:51:31 +02:00
scripts Include the "mysql-test/collections" directory when creating windows ZIP archive 2009-11-17 17:49:24 +01:00
server-tools Bug#48983: Bad strmake calls (length one too long) 2009-12-17 15:58:38 -02:00
sql Bug #49137 Replication failure on SBR/MBR + multi-table DROP TEMPORARY TABLE 2010-01-06 13:12:40 +08:00
sql-bench Bug#44647 - fix file permissions. 2009-07-03 13:48:08 +02:00
sql-common Bug #43414 Parenthesis (and other) warnings compiling MySQL 2009-09-17 17:10:30 +02:00
SSL SSL/Makefile.am mysql-test/Makefile.am: 2007-07-27 17:39:07 +02:00
strings Bug #49955: ld error message: undefined reference to `strmov_overlapp' 2010-01-11 18:21:22 +04:00
support-files bug#30954: "configure" script in binary distributions considered harmfull 2009-09-28 15:14:33 +01:00
tests Bug#45010: invalid memory reads during parsing some strange statements 2009-08-07 23:32:01 -03:00
tools Bug #42434: license of mysys MD5 implementation is not GPL-compatible 2009-03-09 20:57:03 +02:00
VC++Files Merge chunk from trunk. 2008-07-10 14:47:53 -04:00
vio merge from 4.1 2009-10-27 15:11:06 +02:00
win bug#27693: Windows compilation from bk fails using WITH_BERKELEY_STORAGE_ENGINE 2009-09-30 15:46:51 +01:00
zlib The header "config.h" needs to be included "early" to control other headers. 2008-10-13 14:23:39 +02:00
.bzrignore patch for bug#32496 (2nd) with ansi conformant and Mysql test case. 2007-11-26 21:28:01 +01:00
.cvsignore Import changeset 2000-07-31 21:29:14 +02:00
CMakeLists.txt Define _WIN32_WINNT to the minimum supported Windows version, 0x0500 i.e 2009-12-11 19:11:49 +01:00
configure.in Raise version number after cloning 5.0.88 2009-11-09 19:22:35 +01:00
COPYING - manual.texi will be replaced with a manual written in DocBook/XML. This ChangeSet removes all 2005-04-13 11:51:38 +02:00
EXCEPTIONS-CLIENT EXCEPTIONS-CLIENT: 2007-03-14 18:28:16 +01:00
INSTALL-SOURCE Makefile.am: 2007-11-02 12:59:45 +01:00
INSTALL-WIN-SOURCE Makefile.am: 2007-11-02 12:59:45 +01:00
Makefile.am Added make targets 'test-bt-fast' and 'test-bt-debug-fast' 2009-10-15 00:40:40 +02:00
README make_binary_distribution.sh: 2006-11-07 22:26:37 +01:00

This is a release of MySQL, a dual-license SQL database server.
MySQL is brought to you by the MySQL team at MySQL AB.

License information can be found in these files:
- For GPL (free) distributions, see the COPYING file and
  the EXCEPTIONS-CLIENT file.
- For commercial distributions, see the LICENSE.mysql file.


For further information about MySQL or additional documentation, see:
- The latest information about MySQL: http://www.mysql.com
- The current MySQL documentation: http://dev.mysql.com/doc

Some manual sections of special interest:

- If you are migrating from an older version of MySQL, please read the
  "Upgrading from..." section first!
- To see what MySQL can do, take a look at the features section.
- For installation instructions, see the Installing and Upgrading chapter.
- For the new features/bugfix history, see the Change History appendix.
- For the currently known bugs/misfeatures (known errors) see the Problems
  and Common Errors appendix.
- For a list of developers and other contributors, see the Credits
  appendix.

A local copy of the MySQL Reference Manual can be found in the Docs
directory in GNU Info format.  You can also browse the manual online or
download it in any of several formats at the URL given earlier in this
file.

************************************************************

IMPORTANT:

Bug or error reports should be sent to http://bugs.mysql.com.