Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-10527

dpkg configuration script does not escape input

    XMLWordPrintable

    Details

      Description

      The configuration script invoked by `dpkg` does not do any escaping of the root password, failing the installation if certain characters are used.

      Sample input (generated by `pwgen`): Hyw4Go,:ItWku*N"%|3JE#`5HzKzW{Uq

      Outcome:
      ERROR: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '|3JE#`5HzKzW{Uq") WHERE user='root';' at line 1

        Attachments

          Activity

            People

            Assignee:
            otto Otto Kekäläinen
            Reporter:
            damongant Alexander Schittler
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: