unknown 12c6d1f355
BUG#49124 Security issue with /*!-versioned */ SQL statements on Slave ...
Backport to 5.0.
/*![:version:] Query Code */, where [:version:] is a sequence of 5
digits representing the mysql server version(e.g /*!50200 ... */),
is a special comment that the query in it can be executed on those
servers whose versions are larger than the version appearing in the
comment. It leads to a security issue when slave's version is larger
than master's. A malicious user can improve his privileges on slaves.
Because slave SQL thread is running with SUPER privileges, so it can
execute queries that he/she does not have privileges on master.
This bug is fixed with the logic below:
- To replace '!' with ' ' in the magic comments which are not applied on
master. So they become common comments and will not be applied on slave.
- Example:
'INSERT INTO t1 VALUES (1) /*!10000, (2)*/ /*!99999 ,(3)*/
will be binlogged as
'INSERT INTO t1 VALUES (1) /*!10000, (2)*/ /* 99999 ,(3)*/
2011-01-15 13:48:16 +08:00
2007-11-12 13:00:22 +04:00
2008-12-09 16:38:52 +04:00
2009-10-30 11:40:44 +02:00
2007-11-21 11:11:22 +04:00
2009-01-28 20:59:08 +03:00
2007-06-24 19:44:54 +05:00
2007-11-27 21:30:00 +04:00
2009-08-20 13:56:29 +02:00
2009-02-05 21:47:23 +01:00
2009-02-14 18:36:57 +03:00
2009-05-31 20:10:59 +08:00
2008-05-06 21:43:46 +05:00
2007-11-12 13:13:43 +01:00
2007-06-25 22:44:22 -07:00
2009-12-24 15:20:58 +00:00
2008-12-04 01:01:03 +00:00
2008-05-15 19:13:24 -04:00
2008-03-27 13:42:34 +08:00
2007-11-06 20:31:40 +02:00
2008-01-06 15:27:42 +08:00
2009-05-31 11:26:58 +08:00
2008-03-19 18:44:50 +02:00
2009-07-13 18:11:16 +03:00
2009-11-03 19:58:54 +03:00
2009-07-13 14:17:14 +03:00
2009-10-27 12:09:19 +04:00
2008-01-06 15:27:42 +08:00
2007-12-11 10:12:05 +01:00
2009-02-05 21:47:23 +01:00
2008-07-18 14:07:16 +05:00
2008-07-07 10:00:08 -06:00
2008-09-18 15:55:36 +03:00
2009-03-03 21:34:18 +01:00
2009-04-16 13:47:44 -04:00
2009-12-22 13:52:23 +04:00
2007-07-13 13:56:22 +03:00
2009-09-04 12:21:54 +05:30
2008-11-18 11:31:03 +05:30
2007-08-07 05:35:20 -04:00
2008-03-26 09:33:55 +01:00
2009-03-19 12:20:28 +04:00
2008-10-01 14:48:47 +05:00
2008-03-26 09:33:55 +01:00
2008-03-06 09:58:49 +04:00
2008-02-04 11:10:40 +04:00
2008-03-26 09:33:55 +01:00
2008-12-01 13:34:53 +02:00
2008-03-26 09:33:55 +01:00
2008-04-23 02:14:58 +05:00
2007-07-04 12:04:57 +05:00
2007-06-07 17:55:55 +05:00
2009-08-07 23:32:01 -03:00
2008-02-04 11:10:40 +04:00
2008-03-26 09:33:55 +01:00
2008-01-16 11:48:04 +01:00
2007-12-15 19:50:23 +08:00
2008-12-23 18:08:04 +04:00
2008-02-04 11:10:40 +04:00
2008-11-21 13:48:22 +04:00
2009-01-08 10:25:31 +01:00
2008-09-03 12:32:43 +05:00
2007-12-13 15:47:23 +04:00
2010-02-25 16:57:15 +02:00
2007-10-19 17:07:08 +02:00
2009-03-03 21:34:18 +01:00
2009-02-24 18:47:12 +04:00
2009-11-03 17:00:41 +08:00
2007-06-07 00:59:08 -07:00
2007-06-18 16:35:01 +03:00
2010-03-02 18:00:53 +00:00
2008-10-02 13:04:29 +02:00
2010-11-29 18:51:46 -06:00
2009-09-30 18:38:02 -03:00
2008-06-03 13:12:37 +03:00
2007-06-28 16:03:01 -07:00
2009-03-19 11:36:37 +05:30
2009-03-03 21:34:18 +01:00
2009-03-03 21:34:18 +01:00
2009-03-03 21:34:18 +01:00
2008-03-19 15:51:22 +04:00
2007-07-06 11:35:10 -07:00
2007-07-06 11:35:10 -07:00
2009-12-10 11:28:38 +02:00
2009-06-19 11:27:19 +02:00
2008-05-13 20:27:46 +05:00
2009-05-27 14:20:57 +04:00
2007-05-30 00:33:12 +04:00
2009-04-17 18:52:57 +03:00
2010-12-14 23:52:53 +03:00
2009-04-01 16:02:26 +05:00
2008-12-12 17:16:25 +04:00
2007-06-09 17:13:33 +05:00
2010-06-08 10:22:40 +04:00
2009-07-21 19:56:35 +02:00
2009-03-26 15:38:17 +08:00
2008-09-05 13:30:01 +05:00
2009-02-06 18:25:08 +01:00
2007-11-23 16:30:06 +04:00
2009-09-10 15:24:07 +05:00
2008-12-23 18:08:04 +04:00
2010-03-10 12:11:39 +02:00
2009-12-10 11:28:38 +02:00
2009-02-27 09:41:39 +02:00
2009-10-20 11:47:57 +05:30
2009-05-15 13:06:11 +03:00
2009-10-27 12:09:19 +04:00
2009-02-25 14:20:20 +04:00
2009-01-13 13:09:12 +02:00
2008-10-24 06:16:22 +04:00
2009-11-17 17:07:14 +03:00
2009-04-17 12:41:15 +05:00
2007-07-23 23:35:43 -07:00
2009-05-05 17:03:23 -04:00
2008-01-31 12:17:40 +01:00
2007-06-07 20:25:22 +02:00
2009-05-05 17:03:23 -04:00
2008-10-17 13:55:16 +03:00
2009-05-06 13:37:10 +05:30
2007-05-31 14:54:44 +04:00
2008-05-06 21:43:46 +05:00
2009-07-21 19:59:04 +02:00
2009-05-12 09:14:23 -04:00
2010-11-29 18:51:46 -06:00
2010-11-29 18:51:46 -06:00
2008-08-07 18:25:24 -06:00
2009-06-25 15:20:26 +05:30
2009-02-20 11:12:06 +02:00
2009-11-25 15:29:25 +05:30
2009-11-25 15:08:52 +05:30
2009-01-13 20:07:06 -02:00
2009-01-28 20:59:08 +03:00
2009-06-04 12:52:40 +03:00
2009-05-06 17:11:08 +02:00
2007-07-30 17:14:34 +04:00
2007-08-27 10:13:54 -03:00
2009-04-24 17:27:53 +05:30
2009-07-24 15:50:45 +04:00
2009-04-28 20:12:18 +02:00
2009-04-09 14:19:31 +05:00
2007-07-11 18:45:35 -07:00
2010-05-06 10:45:00 +02:00
2010-04-27 00:06:00 +04:00
2007-11-30 06:32:04 +01:00
2007-10-26 15:37:38 +05:00
2007-06-21 21:39:52 -04:00
2008-10-15 18:34:51 -03:00
2010-03-30 15:03:50 +03:00
2009-03-23 15:22:31 +01:00
2009-03-23 15:22:31 +01:00
2009-04-03 16:11:54 -03:00
2009-02-02 22:20:25 +01:00
2007-06-06 04:42:41 +05:00
2007-06-11 23:06:20 +04:00
2009-10-27 12:09:19 +04:00
2009-02-17 18:22:48 +04:00
2007-11-13 11:39:52 +02:00
2009-02-04 15:46:23 +04:00
2008-10-10 15:13:12 +05:00
2009-08-28 10:29:04 +01:00
2008-11-19 19:17:26 +01:00
2008-05-18 14:21:25 +05:00
2009-03-05 18:10:44 +08:00
2009-12-17 09:55:03 +04:00
2009-04-07 16:54:32 +05:30
2007-11-02 13:40:34 +03:00
2007-05-19 18:15:08 +02:00
2009-03-24 23:44:38 +03:00
2009-06-10 11:24:47 +04:00
2009-11-23 14:38:08 -08:00
2008-01-08 22:22:40 +01:00
2009-09-30 10:01:52 +08:00
2008-11-14 11:40:46 +04:00
2009-05-22 10:38:17 -04:00
2007-08-31 16:59:07 +05:00
2009-02-02 18:19:07 +01:00
2008-03-07 11:15:49 +02:00
2009-04-21 14:01:13 +05:00
2009-02-19 15:37:40 -05:00
2007-09-24 12:42:44 +02:00
2007-09-28 09:16:41 +08:00
2008-01-22 14:18:47 +01:00
2007-06-14 18:40:32 +02:00
2007-10-26 08:42:33 +02:00
2007-08-14 15:07:17 +10:00
2008-01-27 16:41:29 +01:00
2007-12-06 17:15:21 +01:00
2008-01-31 13:58:29 +01:00
2009-02-14 18:36:57 +03:00
2007-12-06 17:15:21 +01:00
2007-11-05 20:18:22 +01:00
2007-08-13 15:59:08 +02:00
2007-08-07 18:07:57 +00:00
2009-03-15 12:25:14 -04:00
2009-03-15 12:25:14 -04:00
2007-12-06 17:15:21 +01:00
2009-04-30 12:26:11 +02:00
2008-03-03 20:35:44 +03:00
2007-10-10 20:14:29 +05:00
2009-11-06 09:44:01 +03:00
2010-01-29 15:55:46 +02:00
2009-12-07 16:38:56 +02:00
2007-11-20 20:15:20 +04:00
2009-02-02 22:20:25 +01:00
2009-06-19 11:27:19 +02:00
2007-08-28 11:16:03 -06:00
2008-07-14 15:41:30 -06:00
2008-07-07 10:00:08 -06:00
2008-11-28 17:12:43 +04:00
2009-02-27 16:11:15 +02:00
2007-11-14 15:11:58 -05:00
2009-03-31 10:38:33 +02:00
2008-08-15 16:13:27 -04:00
2008-08-15 16:13:27 -04:00
2008-08-15 16:13:27 -04:00
2008-08-15 16:13:27 -04:00
2008-08-15 16:13:27 -04:00
2008-08-15 16:13:27 -04:00
2009-10-27 12:09:19 +04:00
2009-12-22 10:39:29 +04:00
2008-07-24 11:14:34 -03:00
2009-02-13 17:26:20 -02:00
2007-08-21 13:43:09 +02:00
2009-01-13 20:07:06 -02:00
2008-03-27 03:16:35 +01:00
2009-03-03 21:34:18 +01:00
2009-02-27 16:11:15 +02:00
2009-02-19 17:20:44 +04:00
2007-11-30 18:06:28 +01:00
2008-03-27 13:42:34 +08:00
2009-05-31 11:26:58 +08:00
2008-02-13 14:09:41 +02:00
2009-04-28 14:46:07 +03:00
2007-06-20 13:15:46 +03:00
2007-12-15 19:50:23 +08:00
2011-01-15 13:48:16 +08:00
2009-04-09 11:40:22 +01:00
2009-12-31 11:33:10 +08:00
2007-12-03 13:11:40 +08:00
2008-03-14 17:17:03 +04:00
2009-02-27 16:11:15 +02:00
2009-03-05 18:10:44 +08:00
2008-10-26 22:34:24 +03:00
2008-09-24 08:59:56 -04:00
2007-07-26 16:59:21 +03:00
2009-12-10 11:44:19 +08:00
2009-08-12 11:54:05 +08:00
2008-01-30 15:58:35 +01:00
2008-03-07 21:14:28 +02:00
2007-06-15 16:09:28 +05:00
2008-04-04 01:16:55 +04:00
2008-03-06 14:49:21 +02:00
2007-07-09 13:18:27 -06:00
2009-03-26 15:38:17 +08:00
2008-12-04 18:36:45 +02:00
2009-08-27 17:28:09 +01:00
2007-07-05 13:09:56 +05:00
2007-12-21 11:02:48 +08:00
2007-07-27 18:42:25 +05:00
2007-06-22 09:28:38 +05:00
2007-12-20 16:07:54 +01:00
2008-03-07 21:14:28 +02:00
2007-10-21 18:37:37 +03:00
2009-07-02 13:22:12 +02:00
2007-06-15 16:09:28 +05:00
2009-12-17 16:34:11 +02:00
2009-03-25 16:19:09 +08:00
2007-12-21 20:30:23 +01:00
2009-08-02 23:58:43 +01:00
2009-08-02 23:58:43 +01:00
2009-11-12 17:10:19 +02:00
2008-02-28 11:34:08 -03:00
2008-03-27 13:42:34 +08:00
2008-05-08 09:41:22 +02:00
2010-01-29 13:17:57 +04:00
2009-03-26 20:17:27 -03:00
2010-11-29 18:51:46 -06:00
2007-12-24 17:42:13 +03:00
2009-03-03 21:34:18 +01:00
2009-06-04 10:28:45 +05:00
2009-04-28 20:12:18 +02:00
2007-06-07 19:18:01 +02:00
2008-03-25 11:20:11 -06:00
2007-06-22 11:55:48 +02:00
2008-09-29 19:11:34 +05:00
2009-07-03 10:19:32 +02:00
2007-07-27 16:56:29 +02:00
2009-11-27 18:07:31 +02:00
2007-05-16 14:25:38 +02:00
2009-06-04 13:38:53 +02:00
2007-07-17 14:43:56 -04:00
2007-07-12 22:06:33 -04:00
2008-10-31 10:25:03 +01:00
2008-12-29 16:06:53 +04:00
2008-11-20 15:39:39 +01:00
2009-07-21 19:55:33 +02:00
2009-09-18 12:34:08 +03:00
2007-06-06 18:55:21 +05:00
2009-12-15 19:10:06 +02:00
2008-08-26 14:21:07 +05:00
2009-02-05 21:47:23 +01:00
2009-10-27 12:09:19 +04:00
2008-02-22 12:30:17 +04:00
2009-01-12 17:40:29 +01:00
2009-01-12 17:40:29 +01:00
2009-02-19 15:37:40 -05:00
2008-03-12 16:13:33 +03:00
2009-03-27 12:09:15 +01:00
2008-05-06 21:43:46 +05:00
2007-11-30 06:32:04 +01:00
2009-10-08 16:56:31 +05:00
2008-04-09 12:27:51 -04:00
2007-12-20 08:35:52 +01:00
2008-09-09 20:05:27 +05:00
2008-04-25 00:39:37 +04:00
2007-09-20 13:54:46 +05:00
2009-02-14 20:12:14 +03:00
2008-11-17 19:41:09 +04:00
2007-09-20 13:54:46 +05:00
2008-03-14 20:51:32 +01:00
2009-05-15 12:16:00 +04:00
2009-01-30 17:12:24 +01:00
2007-12-24 17:42:13 +03:00
2008-08-25 17:11:59 +05:00
2009-05-15 12:03:34 +05:00
2007-12-15 19:50:23 +08:00
2009-12-22 13:52:23 +04:00
2009-04-28 20:12:18 +02:00
2009-03-26 19:12:19 +01:00
2010-06-04 16:21:19 +03:00
2009-08-21 17:10:55 +03:00
2010-11-29 18:51:46 -06:00
2008-05-06 21:43:46 +05:00
2009-02-10 11:58:19 +02:00
2010-03-10 19:28:49 +04:00
12c6d1f355