mirror of
https://github.com/MariaDB/server.git
synced 2026-10-23 18:49:29 +03:00
6f78e802c1
Issue: wsrep_notify.sh builds the mysql client invocation as text with values wrapped in '...', then re-parses it via eval. A configured password (or SSL path) containing a single quote breaks out of that quoting, splitting into extra arguments; the unquoted SSL_PARAM splice also let ssl_* values undergo pathname (glob) expansion before eval ever ran. Solution: escape embedded single quotes before interpolating USER, PSWD, HOST and the ssl_* values into the eval'd string, and quote the SSL_PARAM splice so it isn't glob/word-split before eval runs. Applied identically to the std_data test copies, and added a galera regression test reproducing the reported password-splitting.