mirror of
https://github.com/MariaDB/server.git
synced 2025-09-02 09:41:40 +03:00
Fixed BUG#14233: Crash after tampering with the mysql.proc table
Added error checking for errors when attempting to use stored procedures after the mysql.proc table has been dropped, corrupted, or tampered with. Test cases were put in a separate file (sp-destruct.test).
This commit is contained in:
pem@mysql.com
87
mysql-test/r/sp-destruct.result
Normal file
87
mysql-test/r/sp-destruct.result
Normal file
@@ -0,0 +1,87 @@
|
||||
use mysql;
|
||||
drop table if exists proc_backup;
|
||||
create table proc_backup as select * from proc;
|
||||
use test;
|
||||
drop procedure if exists bug14233;
|
||||
drop function if exists bug14233;
|
||||
drop table if exists t1;
|
||||
drop view if exists v1;
|
||||
create procedure bug14233()
|
||||
set @x = 42;
|
||||
create function bug14233_f() returns int
|
||||
return 42;
|
||||
create table t1 (id int);
|
||||
create trigger t1_ai after insert on t1 for each row call bug14233();
|
||||
alter table mysql.proc drop type;
|
||||
call bug14233();
|
||||
ERROR HY000: The table mysql.proc is missing, corrupt, or contains bad data (internal code -5)
|
||||
create view v1 as select bug14233_f();
|
||||
ERROR HY000: The table mysql.proc is missing, corrupt, or contains bad data (internal code -5)
|
||||
insert into t1 values (0);
|
||||
ERROR HY000: The table mysql.proc is missing, corrupt, or contains bad data (internal code -5)
|
||||
flush table mysql.proc;
|
||||
call bug14233();
|
||||
ERROR HY000: Incorrect information in file: './mysql/proc.frm'
|
||||
create view v1 as select bug14233_f();
|
||||
ERROR HY000: Incorrect information in file: './mysql/proc.frm'
|
||||
insert into t1 values (0);
|
||||
ERROR HY000: Incorrect information in file: './mysql/proc.frm'
|
||||
flush table mysql.proc;
|
||||
call bug14233();
|
||||
ERROR 42S02: Table 'mysql.proc' doesn't exist
|
||||
create view v1 as select bug14233_f();
|
||||
ERROR 42S02: Table 'mysql.proc' doesn't exist
|
||||
insert into t1 values (0);
|
||||
ERROR 42S02: Table 'mysql.proc' doesn't exist
|
||||
use mysql;
|
||||
create table proc as select * from proc_backup;
|
||||
alter table proc add primary key (db,name,type);
|
||||
use test;
|
||||
flush table mysql.proc;
|
||||
flush privileges;
|
||||
delete from mysql.proc where name like 'bug14233%';
|
||||
insert into mysql.proc
|
||||
(
|
||||
db, name, type, specific_name, language, sql_data_access, is_deterministic,
|
||||
security_type, param_list, returns, body, definer, created, modified,
|
||||
sql_mode, comment
|
||||
)
|
||||
values
|
||||
(
|
||||
'test', 'bug14233_1', 'FUNCTION', 'bug14233_1', 'SQL', 'READS_SQL_DATA', 'NO',
|
||||
'DEFINER', '', 'int(10)',
|
||||
'select count(*) from mysql.user',
|
||||
'root@localhost', NOW() , '0000-00-00 00:00:00', '', ''
|
||||
),
|
||||
(
|
||||
'test', 'bug14233_2', 'FUNCTION', 'bug14233_2', 'SQL', 'READS_SQL_DATA', 'NO',
|
||||
'DEFINER', '', 'int(10)',
|
||||
'begin declare x int; select count(*) into x from mysql.user; end',
|
||||
'root@localhost', NOW() , '0000-00-00 00:00:00', '', ''
|
||||
),
|
||||
(
|
||||
'test', 'bug14233_3', 'PROCEDURE', 'bug14233_3', 'SQL', 'READS_SQL_DATA','NO',
|
||||
'DEFINER', '', '',
|
||||
'alksj wpsj sa ^#!@ ',
|
||||
'root@localhost', NOW() , '0000-00-00 00:00:00', '', ''
|
||||
);
|
||||
select bug14233_1();
|
||||
ERROR 0A000: Not allowed to return a result set from a function
|
||||
create view v1 as select bug14233_1();
|
||||
ERROR 0A000: Not allowed to return a result set from a function
|
||||
select bug14233_2();
|
||||
ERROR 2F005: FUNCTION bug14233_2 ended without RETURN
|
||||
create view v1 as select bug14233_2();
|
||||
select * from v1;
|
||||
ERROR 2F005: FUNCTION bug14233_2 ended without RETURN
|
||||
call bug14233_3();
|
||||
ERROR 42000: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'wpsj sa ^#!@ ' at line 3
|
||||
drop trigger t1_ai;
|
||||
create trigger t1_ai after insert on t1 for each row call bug14233_3();
|
||||
insert into t1 values (0);
|
||||
ERROR 42000: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'wpsj sa ^#!@ ' at line 3
|
||||
delete from mysql.proc where name like 'bug14233%';
|
||||
drop table mysql.proc_backup;
|
||||
drop trigger t1_ai;
|
||||
drop table t1;
|
||||
drop view v1;
|
||||
130
mysql-test/t/sp-destruct.test
Normal file
130
mysql-test/t/sp-destruct.test
Normal file
@@ -0,0 +1,130 @@
|
||||
#
|
||||
# Destructive stored procedure tests
|
||||
#
|
||||
# We do horrible things to the mysql.proc table here, so any unexpected
|
||||
# failures here might leave it in an undetermined state.
|
||||
#
|
||||
# In the case of trouble you might want to skip this.
|
||||
#
|
||||
|
||||
# We're using --system things that probably doesn't work on Windows.
|
||||
--source include/not_windows.inc
|
||||
|
||||
# Backup proc table
|
||||
use mysql;
|
||||
--disable_warnings
|
||||
drop table if exists proc_backup;
|
||||
--enable_warnings
|
||||
create table proc_backup as select * from proc;
|
||||
use test;
|
||||
|
||||
--disable_warnings
|
||||
drop procedure if exists bug14233;
|
||||
drop function if exists bug14233;
|
||||
drop table if exists t1;
|
||||
drop view if exists v1;
|
||||
--enable_warnings
|
||||
|
||||
create procedure bug14233()
|
||||
set @x = 42;
|
||||
|
||||
create function bug14233_f() returns int
|
||||
return 42;
|
||||
|
||||
create table t1 (id int);
|
||||
create trigger t1_ai after insert on t1 for each row call bug14233();
|
||||
|
||||
# Unsupported tampering with the mysql.proc definition
|
||||
alter table mysql.proc drop type;
|
||||
--error ER_SP_PROC_TABLE_CORRUPT
|
||||
call bug14233();
|
||||
--error ER_SP_PROC_TABLE_CORRUPT
|
||||
create view v1 as select bug14233_f();
|
||||
--error ER_SP_PROC_TABLE_CORRUPT
|
||||
insert into t1 values (0);
|
||||
|
||||
flush table mysql.proc;
|
||||
|
||||
# Thrashing the .frm file
|
||||
--system echo 'saljdlfa' > var/master-data/mysql/proc.frm
|
||||
--error ER_NOT_FORM_FILE
|
||||
call bug14233();
|
||||
--error ER_NOT_FORM_FILE
|
||||
create view v1 as select bug14233_f();
|
||||
--error ER_NOT_FORM_FILE
|
||||
insert into t1 values (0);
|
||||
|
||||
|
||||
flush table mysql.proc;
|
||||
|
||||
# Drop the mysql.proc table
|
||||
--system rm var/master-data/mysql/proc.*
|
||||
--error ER_NO_SUCH_TABLE
|
||||
call bug14233();
|
||||
--error ER_NO_SUCH_TABLE
|
||||
create view v1 as select bug14233_f();
|
||||
--error ER_NO_SUCH_TABLE
|
||||
insert into t1 values (0);
|
||||
|
||||
# Restore mysql.proc
|
||||
use mysql;
|
||||
create table proc as select * from proc_backup;
|
||||
alter table proc add primary key (db,name,type);
|
||||
use test;
|
||||
|
||||
flush table mysql.proc;
|
||||
flush privileges;
|
||||
|
||||
delete from mysql.proc where name like 'bug14233%';
|
||||
|
||||
# Unsupported editing of mysql.proc, circumventing checks in "create ..."
|
||||
insert into mysql.proc
|
||||
(
|
||||
db, name, type, specific_name, language, sql_data_access, is_deterministic,
|
||||
security_type, param_list, returns, body, definer, created, modified,
|
||||
sql_mode, comment
|
||||
)
|
||||
values
|
||||
(
|
||||
'test', 'bug14233_1', 'FUNCTION', 'bug14233_1', 'SQL', 'READS_SQL_DATA', 'NO',
|
||||
'DEFINER', '', 'int(10)',
|
||||
'select count(*) from mysql.user',
|
||||
'root@localhost', NOW() , '0000-00-00 00:00:00', '', ''
|
||||
),
|
||||
(
|
||||
'test', 'bug14233_2', 'FUNCTION', 'bug14233_2', 'SQL', 'READS_SQL_DATA', 'NO',
|
||||
'DEFINER', '', 'int(10)',
|
||||
'begin declare x int; select count(*) into x from mysql.user; end',
|
||||
'root@localhost', NOW() , '0000-00-00 00:00:00', '', ''
|
||||
),
|
||||
(
|
||||
'test', 'bug14233_3', 'PROCEDURE', 'bug14233_3', 'SQL', 'READS_SQL_DATA','NO',
|
||||
'DEFINER', '', '',
|
||||
'alksj wpsj sa ^#!@ ',
|
||||
'root@localhost', NOW() , '0000-00-00 00:00:00', '', ''
|
||||
);
|
||||
|
||||
--error ER_SP_NO_RETSET
|
||||
select bug14233_1();
|
||||
--error ER_SP_NO_RETSET
|
||||
create view v1 as select bug14233_1();
|
||||
|
||||
--error ER_SP_NORETURNEND
|
||||
select bug14233_2();
|
||||
create view v1 as select bug14233_2();
|
||||
--error ER_SP_NORETURNEND
|
||||
select * from v1;
|
||||
|
||||
--error ER_PARSE_ERROR
|
||||
call bug14233_3();
|
||||
drop trigger t1_ai;
|
||||
create trigger t1_ai after insert on t1 for each row call bug14233_3();
|
||||
--error ER_PARSE_ERROR
|
||||
insert into t1 values (0);
|
||||
|
||||
# Clean-up
|
||||
delete from mysql.proc where name like 'bug14233%';
|
||||
drop table mysql.proc_backup;
|
||||
drop trigger t1_ai;
|
||||
drop table t1;
|
||||
drop view v1;
|
||||
@@ -13,6 +13,8 @@
|
||||
# Tests that require multiple connections, except security/privilege tests,
|
||||
# go to sp-thread.
|
||||
# Tests that uses 'goto' to into sp-goto.test (currently disabled)
|
||||
# Tests that destroys system tables (e.g. mysql.proc) for error testing
|
||||
# go to sp-destruct.
|
||||
|
||||
use test;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user