Martin Hansson 0abc0eade2 Bug#35600: Security breach via view, I_S table and prepared ...

statement/stored procedure

View privileges are properly checked after the fix for bug no 
36086, so the method TABLE_LIST::get_db_name() must be used 
instead of field TABLE_LIST::db, as this only works for tables.
Bug appears when accessing views in prepared statements.

2008-09-09 12:49:08 +02:00

34 KiB

Raw Blame History

View Raw