database/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2026-10-23 18:49:29 +03:00
Code Activity
Files
MDEV-41360
mariadb/storage/connect
History
Raghunandan Bhat 9a2306e0ae MDEV-41193: ASAN heap-buffer-overflow in ha_connect::CheckCond after select from Connect table 
Problem:
  When CONNECT engine pushes a WHERE clause down to an external table,
  it writes the filter into the work area, without checking how much
  space is left. A large string literal in the WHERE clause can overflow
  the work area allocated by the engine. For ex: if connect_work_size is
  set to 4MB and the string literal in the WHERE clause is larger than
  4MB, it can grow past the allocated work area.

Fix:
  Track the space left in the work area and check it before writing. If
  the filter doesn't fit, drop it instead of writing past the buffer.
2026-09-25 16:18:34 +05:30
..
mysql-test/connect
MDEV-41193: ASAN heap-buffer-overflow in ha_connect::CheckCond after select from Connect table
2026-09-25 16:18:34 +05:30
.gitignore
…
ApacheInterface.java
…
array.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
array.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
blkfil.cpp
Use memory safe snprintf() in Connect Engine
2022-07-26 16:28:59 +10:00
blkfil.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
block.h
Apply clang-tidy to remove empty constructors / destructors
2023-02-09 16:09:08 +02:00
bson.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
bson.h
Apply clang-tidy to remove empty constructors / destructors
2023-02-09 16:09:08 +02:00
bsonudf.cpp
Merge branch '10.6' into 10.11
2026-08-19 08:13:54 +02:00
bsonudf.h
MDEV-36894 JSNX::SetArrayOptions and BJNX::SetArrayOptions unused nm arg
2025-05-28 16:33:09 +10:00
catalog.h
MDEV-30713 field length handling for CONNECT engine
2023-04-21 15:47:53 +01:00
checklvl.h
…
Client2.java
…
Client3.java
…
Client.java
…
CMakeLists.txt
Merge branch '10.6' into 10.11
2026-08-19 08:13:54 +02:00
cmgfam.cpp
…
cmgfam.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
cmgoconn.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
cmgoconn.h
…
colblk.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
colblk.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
connect.cc
MDEV-36248 Connect crashes server because of duplicate 'free()' in GetUser
2025-03-09 16:01:53 +02:00
connect.h
…
csort.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
csort.h
Apply clang-tidy to remove empty constructors / destructors
2023-02-09 16:09:08 +02:00
domdoc.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
domdoc.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
encas.h
MDEV-37633 Connect UDF functions push empty string warning.
2025-09-12 16:29:04 +10:00
engmsg.h
MDEV-37633 Connect UDF functions push empty string warning.
2025-09-12 16:29:04 +10:00
enids.h
…
filamap.cpp
Merge branch '10.3' into 10.4
2022-07-27 11:02:57 +02:00
filamap.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
filamdbf.cpp
Merge branch '10.6' into 10.11
2026-08-19 08:13:54 +02:00
filamdbf.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
filamfix.cpp
CONNECT: suppress \n at the end of the error message
2026-04-12 18:07:59 +02:00
filamfix.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
filamgz.cpp
zlib 1.3.2
2026-04-24 22:19:40 +02:00
filamgz.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
filamtxt.cpp
MDEV-38827 Assertion `str[strlen(str)-1] != '\n'[ || strlen(str) == 512-1]' failed in my_message_sql
2026-04-12 18:07:59 +02:00
filamtxt.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
filamvct.cpp
CONNECT: suppress \n at the end of the error message
2026-04-12 18:07:59 +02:00
filamvct.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
filamzip.cpp
MDEV-40316: Infer: PULSE_RESOURCE_LEAK in connect
2026-07-10 10:05:58 +02:00
filamzip.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
filechk.cpp
MDEV-40323 CONNECT engine - add file access checks for JSON UDFs
2026-08-01 11:56:34 +02:00
filechk.h
MDEV-40323 CONNECT engine - add file access checks for JSON UDFs
2026-08-01 11:56:34 +02:00
filter.cpp
connect engine: correct two uninitalized variable errors
2025-07-29 13:15:02 +10:00
filter.h
connect engine: correct two uninitalized variable errors
2025-07-29 13:15:02 +10:00
fmdlex.c
Fix insecure use of strcpy, strcat and sprintf in Connect
2023-05-12 15:37:00 +01:00
global.h
MDEV-41193: ASAN heap-buffer-overflow in ha_connect::CheckCond after select from Connect table
2026-09-25 16:18:34 +05:30
ha_connect.cc
MDEV-41193: ASAN heap-buffer-overflow in ha_connect::CheckCond after select from Connect table
2026-09-25 16:18:34 +05:30
ha_connect.h
Merge 10.5 into 10.6
2024-06-24 13:09:47 +03:00
inihandl.cpp
…
inihandl.h
…
ints.h
zlib 1.3.2
2026-04-24 22:19:40 +02:00
ioapi.c
zlib 1.3.2
2026-04-24 22:19:40 +02:00
ioapi.h
Merge branch '10.6' into 10.11
2026-05-08 07:38:22 +02:00
javaconn.cpp
CONNECT: suppress \n at the end of the error message
2026-04-12 18:07:59 +02:00
javaconn.h
…
jdbccat.h
…
JdbcInterface.java
…
jdbconn.cpp
MDEV-38892 not all SRCDEF sprintfs were removed
2026-04-12 18:07:59 +02:00
jdbconn.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
jmgfam.cpp
…
jmgfam.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
jmgoconn.cpp
Fix insecure use of strcpy, strcat and sprintf in Connect
2023-05-12 15:37:00 +01:00
jmgoconn.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
json.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
json.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
jsonudf.cpp
Merge branch '10.6' into 10.11
2026-08-19 08:13:54 +02:00
jsonudf.h
MDEV-36894 JSNX::SetArrayOptions and BJNX::SetArrayOptions unused nm arg
2025-05-28 16:33:09 +10:00
libdoc.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
libdoc.h
…
LICENSE.Info-Zip
zlib 1.3.2
2026-04-24 22:19:40 +02:00
macutil.cpp
Merge 10.6 into 10.11
2026-04-20 11:07:30 +03:00
macutil.h
…
maputil.cpp
Merge 10.4 into 10.5
2022-07-27 17:17:24 +03:00
maputil.h
…
MariadbInterface.java
…
messages.h
Remove unused French translations in Connect engine (#2252)
2023-05-19 13:21:34 +01:00
mini-global.h
…
Mongo2Interface.java
…
Mongo3Interface.java
…
mongo.cpp
Use memory safe snprintf() in Connect Engine
2022-07-26 16:28:59 +10:00
mongo.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
msgid.h
MDEV-37633 Connect UDF functions push empty string warning.
2025-09-12 16:29:04 +10:00
mycat.cc
Merge 10.5 into 10.6
2022-07-27 17:52:37 +03:00
mycat.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
myconn.cpp
Merge branch 10.6 into 10.11
2026-07-23 11:12:27 +02:00
myconn.h
…
MysqlInterface.java
…
myutil.cpp
MDEV-29782 CONNECT YEAR type conversion fix
2023-02-21 17:55:01 +00:00
myutil.h
…
noconst.c
…
odbccat.h
…
odbconn.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
odbconn.h
…
OracleInterface.java
…
os.h
…
osutil.c
Fix insecure use of strcpy, strcat and sprintf in Connect
2023-05-12 15:37:00 +01:00
osutil.h
…
plgcnx.h
…
plgdbsem.h
Remove unused French translations in Connect engine (#2252)
2023-05-19 13:21:34 +01:00
plgdbutl.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
plgodbc.h
…
plgxml.cpp
Use memory safe snprintf() in Connect Engine
2022-07-26 16:28:59 +10:00
plgxml.h
MDEV-36427 - FTBFS with libxml2 2.14.0
2025-04-07 11:16:20 +02:00
plugutil.cpp
MDEV-41193: ASAN heap-buffer-overflow in ha_connect::CheckCond after select from Connect table
2026-09-25 16:18:34 +05:30
PostgresqlInterface.java
…
preparse.h
…
rcmsg.c
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
rcmsg.h
…
reldef.cpp
Merge 10.6 into 10.11
2026-04-20 11:07:30 +03:00
reldef.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
resource.h
…
rest.def
…
restget.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
skipset.h
zlib 1.3.2
2026-04-24 22:19:40 +02:00
tabbson.cpp
Merge branch '10.4' into 10.5
2023-04-24 12:43:47 +02:00
tabbson.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabcmg.cpp
…
tabcmg.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabcol.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabcol.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabdos.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabdos.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabext.cpp
MDEV-41193: ASAN heap-buffer-overflow in ha_connect::CheckCond after select from Connect table
2026-09-25 16:18:34 +05:30
tabext.h
MDEV-41193: ASAN heap-buffer-overflow in ha_connect::CheckCond after select from Connect table
2026-09-25 16:18:34 +05:30
tabfix.cpp
MDEV-37613 Connect Storage Engine - remove anonymous union
2026-03-24 17:34:12 +11:00
tabfix.h
MDEV-37613 Connect Storage Engine - remove anonymous union
2026-03-24 17:34:12 +11:00
tabfmt.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabfmt.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabjdbc.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabjdbc.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabjmg.cpp
Fix Connect compile issue
2023-05-15 09:22:26 +01:00
tabjmg.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabjson.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabjson.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
table.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabmac.cpp
Merge 10.6 into 10.11
2026-04-20 11:07:30 +03:00
tabmac.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabmul.cpp
Merge branch 10.6 into 10.11
2026-07-23 11:12:27 +02:00
tabmul.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabmysql.cpp
Merge commit '10.4' into 10.5
2023-07-20 11:54:52 +02:00
tabmysql.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
taboccur.cpp
Merge 10.4 into 10.5
2022-07-27 17:17:24 +03:00
taboccur.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabodbc.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabodbc.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabpivot.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabpivot.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabrest.cpp
Merge branch 10.6 into 10.11
2026-07-23 11:12:27 +02:00
tabrest.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabsys.cpp
MDEV-37613 Connect Storage Engine - remove anonymous union
2026-03-24 17:34:12 +11:00
tabsys.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabtbl.cpp
MDEV-40867 CONNECT writes unvalidated data from remote filter into fixed-len buffer
2026-08-28 11:50:29 +03:00
tabtbl.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabutil.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabutil.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabvct.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
tabvct.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabvir.cpp
Use memory safe snprintf() in Connect Engine
2022-07-26 16:28:59 +10:00
tabvir.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabwmi.cpp
MDEV-38827 Assertion `str[strlen(str)-1] != '\n'[ || strlen(str) == 512-1]' failed in my_message_sql
2026-04-12 18:07:59 +02:00
tabwmi.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabxcl.cpp
Fixed compiler warning from clang in connect/tabxcl.cpp
2025-06-02 14:02:53 +03:00
tabxcl.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabxml.cpp
Connect: TDBXML::ReadDB - remove deadstore
2026-03-24 17:34:12 +11:00
tabxml.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
tabzip.cpp
zlib 1.3.2
2026-04-24 22:19:40 +02:00
tabzip.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
TestInsert2.java
…
TestInsert3.java
…
unzip.c
zlib 1.3.2
2026-04-24 22:19:40 +02:00
unzip.h
zlib 1.3.2
2026-04-24 22:19:40 +02:00
user_connect.cc
MDEV-36248 Connect crashes server because of duplicate 'free()' in GetUser
2025-03-09 16:01:53 +02:00
user_connect.h
…
valblk.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
valblk.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
value.cpp
Merge branch '10.6' into 10.11
2026-08-19 08:13:54 +02:00
value.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
xindex.cpp
Merge 10.6 into 10.11
2026-04-20 11:07:30 +03:00
xindex.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
xobject.cpp
MDEV-39173 Replace sprintf with snprintf, remove deprecated pragma
2026-04-16 19:00:12 +10:00
xobject.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
xtable.h
MDEV-33746 Supply missing override markings
2024-06-20 11:32:13 -04:00
zip.c
zlib 1.3.2
2026-04-24 22:19:40 +02:00
zip.h
zlib 1.3.2
2026-04-24 22:19:40 +02:00