Hemant Dangi
6f78e802c1
MDEV-41230: shipped wsrep_notify.sh reparses credentials through eval
...
Issue: wsrep_notify.sh builds the mysql client invocation as text with
values wrapped in '...', then re-parses it via eval. A configured
password (or SSL path) containing a single quote breaks out of that
quoting, splitting into extra arguments; the unquoted SSL_PARAM splice
also let ssl_* values undergo pathname (glob) expansion before eval
ever ran.
Solution: escape embedded single quotes before interpolating USER,
PSWD, HOST and the ssl_* values into the eval'd string, and quote the
SSL_PARAM splice so it isn't glob/word-split before eval runs. Applied
identically to the std_data test copies, and added a galera regression
test reproducing the reported password-splitting.
2026-10-01 13:14:48 +03:00
..
2026-06-15 10:43:23 +02:00
2023-03-07 15:49:24 +00:00
2024-07-17 11:25:51 +10:00
2024-07-17 14:32:50 +10:00
2026-05-08 07:38:22 +02:00
2022-07-25 12:08:29 +03:00
2024-07-17 13:58:44 +10:00
2026-08-19 08:13:54 +02:00
2024-07-17 14:32:50 +10:00
2021-02-25 12:16:13 +11:00
2024-07-17 11:25:51 +10:00
2023-12-12 12:53:48 +11:00
2022-01-16 13:23:02 -08:00
2020-04-19 17:15:40 +03:00
2020-04-19 17:15:40 +03:00
2024-07-17 11:25:51 +10:00
2024-05-10 20:02:18 +02:00
2022-05-05 12:06:56 +10:00
2024-07-17 11:25:51 +10:00
2024-07-17 11:25:51 +10:00
2024-07-17 12:19:08 +10:00
2022-05-05 12:06:56 +10:00
2024-07-17 11:25:51 +10:00
2022-05-05 12:06:56 +10:00
2024-07-17 11:25:51 +10:00
2022-04-26 12:46:39 +10:00
2022-05-05 12:06:56 +10:00
2022-05-05 12:06:56 +10:00
2024-07-17 11:25:51 +10:00
2022-04-26 12:46:39 +10:00
2022-04-26 12:46:39 +10:00
2022-04-26 12:46:39 +10:00
2020-06-10 13:24:18 +03:00
2024-07-17 11:25:51 +10:00
2023-05-08 16:52:27 +10:00
2023-05-08 16:52:27 +10:00
2021-06-08 16:03:53 +03:00
2020-07-10 21:56:14 +03:00
2020-04-13 14:33:50 +03:00
2022-09-07 14:05:09 +01:00
2022-05-10 08:22:21 +02:00
2024-07-17 11:25:51 +10:00
2024-07-17 14:32:50 +10:00
2024-07-17 14:32:50 +10:00
2022-09-07 14:05:09 +01:00
2021-10-27 15:55:14 +02:00
2024-07-17 11:25:51 +10:00
2021-10-27 15:55:14 +02:00
2024-07-17 11:25:51 +10:00
2021-10-27 15:55:14 +02:00
2024-07-17 11:25:51 +10:00
2021-10-27 15:55:14 +02:00
2024-07-17 11:25:51 +10:00
2021-10-27 15:55:14 +02:00
2024-07-17 11:25:51 +10:00
2022-09-13 16:36:38 +03:00
2024-07-17 11:25:51 +10:00
2020-07-08 12:24:55 +03:00
2020-06-12 01:17:57 +02:00
2024-07-17 14:32:50 +10:00
2024-07-17 11:25:51 +10:00
2024-07-17 14:32:50 +10:00
2022-04-26 12:46:39 +10:00
2025-10-25 10:23:26 +11:00
2026-03-31 18:30:22 +11:00
2026-10-01 13:14:48 +03:00
2022-04-26 12:46:39 +10:00
2024-07-17 14:32:50 +10:00
2024-07-17 14:32:50 +10:00
2024-07-17 14:32:50 +10:00
2026-05-15 13:30:21 +10:00
2024-07-22 15:14:50 +02:00
2024-06-05 09:54:41 +10:00
2024-07-17 14:32:50 +10:00
2026-05-15 13:30:21 +10:00
2022-04-26 12:46:39 +10:00
2022-04-26 12:46:39 +10:00
2026-05-03 19:17:17 +10:00
2026-10-01 13:14:48 +03:00
2023-06-08 10:46:19 +03:00
2024-07-17 11:25:51 +10:00
2020-06-12 01:17:57 +02:00
2024-07-17 11:25:51 +10:00
2020-04-19 17:15:40 +03:00
2026-03-11 08:40:53 +02:00
2025-06-23 13:51:52 +03:00
2024-07-17 14:32:50 +10:00