mirror of
https://github.com/MariaDB/server.git
synced 2026-10-23 18:49:29 +03:00
4f66ca1b69
Check FILE_ACL and secure_file_priv for the current user inside CONNECT file UDFs (json_file, jfile_make, jbin_file, bson_file, bfile_make, bbin_file). Fix NULL filename: guard GetFileLength in jbin_file_init and check for NULL fn in UDF bodies before the access check, so NULL arguments report "Missing file name" instead of "Access denied".
42 lines
1.4 KiB
C++
42 lines
1.4 KiB
C++
/* Copyright (C) MariaDB Corporation Ab
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; version 2 of the License.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335 USA
|
|
*/
|
|
|
|
#include <my_global.h>
|
|
#include <mysqld.h>
|
|
#include <sql_parse.h>
|
|
#include "filechk.h"
|
|
|
|
/*
|
|
@return true if the current user may access path.
|
|
*/
|
|
bool connect_can_access_file(const char *path)
|
|
{
|
|
char real_path[FN_REFLEN];
|
|
|
|
if (!path)
|
|
return false; /* callers must check for NULL before calling */
|
|
|
|
if (check_global_access(current_thd, FILE_ACL, true))
|
|
return false;
|
|
|
|
/* MY_SAFE_PATH returns NULL on overflow; fail closed rather than validate a truncated path */
|
|
if (!fn_format(real_path, path, mysql_real_data_home, "",
|
|
MY_RELATIVE_PATH | MY_UNPACK_FILENAME | MY_RETURN_REAL_PATH | MY_SAFE_PATH))
|
|
return false;
|
|
|
|
return is_secure_file_path(real_path);
|
|
}
|