Davi Arnaut c7163c630a
Bug#45010: invalid memory reads during parsing some strange statements ...
The problem is that the lexer could inadvertently skip over the
end of a query being parsed if it encountered a malformed multibyte
character. A specially crated query string could cause the lexer
to jump up to six bytes past the end of the query buffer. Another
problem was that the laxer could use unfiltered user input as
a signed array index for the parser maps (having upper and lower
bounds 0 and 256 respectively).
The solution is to ensure that the lexer only skips over well-formed
multibyte characters and that the index value of the parser maps
is always a unsigned value.
mysql-test/r/ctype_recoding.result:
Update test case result: ending backtick is not skipped over anymore.
sql/sql_lex.cc:
Characters being analyzed must be unsigned as they can be
used as indexes for the parser maps. Only skip over if the
string is a valid multi-byte sequence.
tests/mysql_client_test.c:
Add test case for Bug#45010
2009-08-07 23:32:01 -03:00
2009-06-17 15:54:01 +02:00
2009-07-17 14:13:53 +05:30
2008-12-17 15:01:34 -05:00
2009-06-17 15:54:01 +02:00
2009-06-09 18:11:21 +02:00
2009-06-09 18:11:21 +02:00
2008-07-15 18:13:21 +04:00
2009-02-10 17:47:54 -05:00
2009-06-09 18:11:21 +02:00
2009-04-14 13:20:13 -04:00
2008-07-14 16:16:37 -04:00
2008-03-19 18:44:50 +02:00
2007-11-16 14:46:36 +04:00
2009-06-17 15:54:01 +02:00
2007-11-30 17:08:00 +04:00
2007-10-23 16:32:05 +05:00
2007-07-17 19:51:50 +04:00
2009-07-17 14:13:53 +05:30
2009-04-24 16:33:50 +05:30
2009-07-24 20:58:58 +05:00
2007-07-12 13:29:51 +02:00
2009-05-27 15:34:21 +05:00
2007-06-06 04:42:41 +05:00
2008-03-29 09:52:16 +02:00
2008-02-28 14:23:22 +01:00
2008-07-10 14:47:53 -04:00
2007-11-05 20:18:22 +01:00
2009-07-17 14:13:53 +05:30
2008-11-25 10:22:02 +04:00
2008-04-03 11:32:00 -04:00
2009-06-09 18:11:21 +02:00
2008-12-12 14:59:10 +04:00
2008-04-10 15:55:37 -04:00
2009-06-09 18:11:21 +02:00
2009-07-15 15:00:58 +05:30
2009-04-28 14:47:26 +05:00
2007-10-04 12:01:28 +05:00
2009-06-01 16:42:24 +04:00
2009-05-27 14:20:57 +04:00
2009-07-16 19:43:46 +04:00
2007-10-30 14:27:21 +02:00
2009-07-10 15:00:34 +03:00
2008-12-09 20:35:02 +02:00
2009-06-09 18:11:21 +02:00
2009-02-06 18:25:08 +01:00
2009-07-18 18:09:56 +04:00
2009-04-01 16:02:26 +05:00
2007-11-21 22:56:42 +04:00
2009-04-14 13:20:13 -04:00
2009-07-24 20:58:58 +05:00
2009-03-27 13:19:50 +08:00
2009-05-31 11:26:58 +08:00
2009-07-31 15:22:02 -04:00
2008-10-23 15:28:53 +02:00
2008-10-23 15:28:53 +02:00
2008-10-23 15:28:53 +02:00
2008-10-23 15:28:53 +02:00
2008-11-26 09:28:17 +01:00
2008-04-25 00:39:37 +04:00
2009-05-27 14:20:57 +04:00
2009-08-06 10:24:28 -04:00
2009-07-28 22:35:55 +04:00
2008-11-14 02:01:41 +01:00
2008-11-14 02:01:41 +01:00
2009-07-16 15:37:38 +03:00
2008-08-25 21:02:54 +04:00
2009-06-09 18:11:21 +02:00
2009-02-10 17:47:54 -05:00
2008-11-14 21:25:57 +04:00
2009-05-27 14:20:57 +04:00
2008-03-21 17:23:17 +02:00
2009-03-19 09:44:58 -04:00
2008-07-15 18:13:21 +04:00
2008-07-10 14:50:07 -04:00
2009-07-16 15:37:38 +03:00
2009-06-19 11:27:19 +02:00
2009-07-24 20:58:58 +05:00
2009-04-28 14:46:07 +03:00
2009-07-24 20:58:58 +05:00
2008-11-21 17:38:42 +04:00
2008-11-21 17:38:42 +04:00
2008-11-21 17:38:42 +04:00
2008-01-23 13:26:41 -07:00
2008-01-23 13:26:41 -07:00
2009-07-16 15:37:38 +03:00
2009-02-10 17:47:54 -05:00
2009-06-17 15:54:01 +02:00
2009-07-16 15:37:38 +03:00
2008-03-21 17:23:17 +02:00
2009-06-17 15:54:01 +02:00
2008-03-21 17:23:17 +02:00
2007-10-17 20:08:58 +04:00
2009-07-16 15:19:22 +03:00
2009-04-14 13:20:13 -04:00
2008-07-16 16:29:22 -06:00
2009-07-24 20:58:58 +05:00
2009-07-24 20:58:58 +05:00
2007-05-24 11:21:27 +02:00
2009-02-10 17:47:54 -05:00
2008-12-10 18:13:11 +04:00
2009-03-27 13:19:50 +08:00
2009-07-13 18:11:16 +03:00
2009-02-10 17:47:54 -05:00
2009-02-10 17:47:54 -05:00
2007-06-06 04:42:41 +05:00
2009-04-17 12:41:15 +05:00
2009-06-17 15:54:01 +02:00
2009-07-24 20:58:58 +05:00
2009-08-07 23:32:01 -03:00
2009-05-06 09:06:32 -04:00
2008-08-11 10:10:00 -06:00
2009-06-17 15:54:01 +02:00
2008-12-23 18:08:04 +04:00
2007-10-23 14:27:11 +05:00
2009-07-24 20:58:58 +05:00
2009-06-17 15:54:01 +02:00
2009-07-16 15:37:38 +03:00
2009-05-05 17:03:23 -04:00
2009-03-27 13:19:50 +08:00
2009-07-24 20:58:58 +05:00
2008-03-11 14:42:54 +01:00
2009-07-24 16:13:31 +04:00
2009-07-16 15:19:22 +03:00
2009-07-24 20:58:58 +05:00
2007-07-01 15:33:28 -07:00
2009-03-19 09:44:58 -04:00
2008-08-11 10:10:00 -06:00
2009-06-29 15:17:01 +02:00
2009-06-17 15:54:01 +02:00
2007-07-12 22:26:41 +04:00
2009-02-10 17:47:54 -05:00
2007-07-06 16:18:49 +04:00
2009-05-15 12:03:34 +05:00
2009-07-13 18:11:16 +03:00
2009-06-17 15:54:01 +02:00
2008-02-21 14:58:29 -03:00
2009-07-16 15:37:38 +03:00
2008-09-16 13:16:41 +02:00
2008-02-19 12:37:39 +01:00
2009-01-21 13:45:23 -05:00
2009-06-17 15:54:01 +02:00
2009-06-17 15:54:01 +02:00
2009-06-29 15:17:01 +02:00
2009-06-17 15:54:01 +02:00
2009-06-17 15:54:01 +02:00
2008-12-01 16:18:35 +02:00
2009-02-10 17:47:54 -05:00
2007-10-17 17:54:11 -04:00
2009-06-17 15:54:01 +02:00
2009-02-10 17:47:54 -05:00
2009-07-31 15:22:02 -04:00
c7163c630a