You've already forked mariadb-connector-c
mirror of
https://github.com/mariadb-corporation/mariadb-connector-c.git
synced 2026-10-23 21:28:58 +03:00
dd532fcc1c
Replace strncpy/strnlen parsing in plugins/auth/auth_gssapi_client.c with bounded memchr/memcpy calls to prevent two security vulnerabilities: 1. Stack Buffer Over-Read: Oversized SPN inputs without a NUL byte caused strncpy to omit NUL-termination, leading to OOB reads in strlen(). 2. Packet Over-Read: Malformed packets missing a NUL terminator caused mechanism parsing to read past the end of the packet buffer. Thanks to Aisle Research for reporting this issue
This is LGPL MariaDB client library that can be used to connect to a MariaDB or MySQL database server. This code is based on the LGPL libmysql client library from MySQL 3.23 and PHP's mysqlnd extension. This product includes PHP software, freely available from <http://www.php.net/software/> If you want to be part of this development effort, you can discuss this at maria-developers@lists.launchpad.org. To report a bug you'll need to signup for an account at https://jira.mariadb.org The MariaDB team