Uploaded image for project: 'MariaDB Connector/Python'
  1. MariaDB Connector/Python
  2. CONPY-365

check invalid metadata

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Major
    • Resolution: Unresolved
    • 1.1.14
    • 1.1.15
    • Generic
    • None
    • 3.13

    Description

      While the core issue (CONC-820) was fixed in the underlying driver, we require an additional defensive check in the Python extension layer to mitigate risks when linked against older, unpatched versions of Connector/C.

      A malicious or compromised server can manipulate field metadata—specifically inflating the length of a NEWDECIMAL field. If this invalid length is passed unfiltered to the Python C-extension, the alloca() call will attempt to allocate excessive memory on the stack, leading to a stack exhaustion/overflow or stack smashing, crashing the application."

      Attachments

        Issue Links

          Activity

            People

              georg Georg Richter
              georg Georg Richter
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.