Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-36245

Long server_audit_file_path causes buffer overflow

Details

    Description

      Currently, the length of the server_audit_file_path system variable value is
      not checked. This can cause a buffer overflow if given a long file path
      specifying a directory as a memcpy() is performed to copy the entire file path into a
      fixed size buffer, char alt_path_buffer[FN_REFLEN+1+DEFAULT_FILENAME_LEN];

      Pull request: https://github.com/MariaDB/server/pull/3874

      Attachments

        Activity

          Transition Time In Source Status Execution Times
          Sergey Vojtovich made transition -
          Open In Progress
          		3m 33s 1
          Sergey Vojtovich made transition -
          In Progress In Testing
          		3s 1
          Sergey Vojtovich made transition -
          Stalled In Testing
          		4s 1
          Sergey Vojtovich made transition -
          In Testing Stalled
          		13s 2
          Alexey Botchkov made transition -
          In Review Stalled
          		30d 13h 36m 1
          Sergey Vojtovich made transition -
          Stalled In Review
          		9d 4h 45m 2
          Sergei Golubchik made transition -
          In Review Closed
          		2d 17h 21m 1

          People

            holyfoot Alexey Botchkov
            svoj Sergey Vojtovich
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.