1
0
mirror of https://github.com/MariaDB/server.git synced 2026-10-23 18:49:29 +03:00
Files
Hemant Dangi 6f78e802c1 MDEV-41230: shipped wsrep_notify.sh reparses credentials through eval
Issue: wsrep_notify.sh builds the mysql client invocation as text with
values wrapped in '...', then re-parses it via eval. A configured
password (or SSL path) containing a single quote breaks out of that
quoting, splitting into extra arguments; the unquoted SSL_PARAM splice
also let ssl_* values undergo pathname (glob) expansion before eval
ever ran.

Solution: escape embedded single quotes before interpolating USER,
PSWD, HOST and the ssl_* values into the eval'd string, and quote the
SSL_PARAM splice so it isn't glob/word-split before eval runs. Applied
identically to the std_data test copies, and added a galera regression
test reproducing the reported password-splitting.
2026-10-01 13:14:48 +03:00
..
2023-05-02 10:09:27 +02:00
…
2020-07-02 09:41:44 +03:00
2017-07-18 14:59:33 +02:00
2026-07-27 15:32:38 -06:00
2026-07-27 15:32:38 -06:00
2026-07-27 15:32:38 -06:00
2026-07-27 15:32:38 -06:00
2026-07-27 15:32:38 -06:00
2026-07-27 15:32:38 -06:00
…
…