Uploaded image for project: 'MariaDB Connector/J'
  1. MariaDB Connector/J
  2. CONJ-1322

Match LOAD LOCAL INFILE filename case-sensitively

    XMLWordPrintable

Details

    Description

      When the server requests a local file (LOAD DATA/XML LOCAL INFILE), the connector validates that the requested filename matches the one in the client's SQL statement, so a rogue or man-in-the-middle server cannot request an arbitrary file.

      That validation compared the filename case-insensitively. On case-sensitive filesystems (Linux), a path differing only in case is a distinct file, so the check was slightly looser than the actual filesystem semantics.

      from https://github.com/mariadb-corporation/mariadb-connector-j/pull/225

      Attachments

        Activity

          People

            diego dupin Diego Dupin
            diego dupin Diego Dupin
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.