From 42be9e67d83488121f8219a3aeaba6e54204e964 Mon Sep 17 00:00:00 2001 From: Oleksandr Byelkin Date: Mon, 20 Jan 2020 11:14:21 +0100 Subject: [PATCH] Bug#29630767 - USE OF UNINITIALIZED VALUE IN LIBMYSQL (CLIENT.CC FUNCTION RUN_PLUGIN_AUTH) --- libmariadb/mariadb_lib.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/libmariadb/mariadb_lib.c b/libmariadb/mariadb_lib.c index 4c1108b0..c156ecb5 100644 --- a/libmariadb/mariadb_lib.c +++ b/libmariadb/mariadb_lib.c @@ -1514,7 +1514,10 @@ MYSQL *mthd_my_real_connect(MYSQL *mysql, const char *host, const char *user, scramble_len= pkt_scramble_len; scramble_plugin= scramble_data + scramble_len; if (scramble_data + scramble_len > end_pkt) - scramble_len= (uint)(end_pkt - scramble_data); + { + SET_CLIENT_ERROR(mysql, CR_MALFORMED_PACKET, SQLSTATE_UNKNOWN, 0); + goto error; + } } else { scramble_len= (uint)(end_pkt - scramble_data);