database/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2025-12-24 11:21:21 +03:00
Code Activity

MDEV-3915 COM_CHANGE_USER allows fast password brute-forcing

Browse Source 
allow only three failed change_user per connection.
successful change_user do NOT reset the counter

tests/mysql_client_test.c:
  make --error to work for --change_user errors
This commit is contained in:
Sergei Golubchik
2013-01-25 00:17:39 +01:00
parent 8127e631de
commit bfc71e63a7
8 changed files with 164 additions and 79 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
mysql-test/r/change_user_notembedded.result Normal file
View File

@@ -0,0 +1,5 @@
ERROR 28000: Access denied for user 'foo'@'localhost' (using password: NO)
ERROR 28000: Access denied for user 'foo'@'localhost' (using password: NO)
ERROR 28000: Access denied for user 'foo'@'localhost' (using password: NO)
ERROR 08S01: Unknown command
ERROR 08S01: Unknown command