1
0
mirror of https://github.com/MariaDB/server.git synced 2025-09-02 09:41:40 +03:00
Files
mariadb/mysql-test/r
Georgi Kodinov 59d7516005 Bug #11764517: 57359: POSSIBLE TO CIRCUMVENT SECURE_FILE_PRIV
USING '..' ON WINDOWS

Backport of the fix to 5.0 (to be null-merged to 5.1).
Moved the test into the main test suite. 
Made mysql-test-run.pl to not use symlinks for sdtdata as the symlinks
are now properly recognized by secure_file_priv.
Made sure the paths in load_file(), LOAD DATA and SELECT .. INTO OUTFILE 
that are checked against secure_file_priv in a correct way similarly to 5.1 
by the extended is_secure_file_path() backport before the comparison.
Added an extensive test with all the variants of upper/lower case, 
slash/backslash and case sensitivity.
Added few comments to the code.
2011-04-28 12:22:41 +03:00
..
2009-05-31 20:10:59 +08:00
2007-11-06 20:31:40 +02:00
2009-11-03 19:58:54 +03:00
2007-12-13 15:47:23 +04:00
2007-10-19 17:07:08 +02:00
2007-06-28 16:03:01 -07:00
2007-07-06 11:35:10 -07:00
2007-07-06 11:35:10 -07:00
2009-02-06 18:25:08 +01:00
2007-07-23 23:35:43 -07:00
2007-06-07 20:25:22 +02:00
2007-07-11 18:45:35 -07:00
2007-11-02 13:40:34 +03:00
2009-11-23 14:38:08 -08:00
2007-08-31 16:59:07 +05:00
2007-10-26 08:42:33 +02:00
2008-01-27 16:41:29 +01:00
2007-11-05 20:18:22 +01:00
2007-11-20 20:15:20 +04:00
2009-02-27 16:11:15 +02:00
2007-11-30 18:06:28 +01:00
2009-12-10 11:44:19 +08:00
2008-04-04 01:16:55 +04:00
2007-06-06 18:55:21 +05:00
2008-08-26 14:21:07 +05:00
2008-03-14 20:51:32 +01:00
2010-03-10 19:28:49 +04:00