Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-40308

single quotes make SHOW CREATE USER invalid

    XMLWordPrintable

Details

    • Can result in unexpected behaviour

    Description

      e.g.

      source include/have_unix_socket.inc;
      CREATE USER 'x''y'@localhost IDENTIFIED VIA unix_socket USING 'x''y' REQUIRE SUBJECT 'x''y';
      GRANT PROXY ON 'x''y'@localhost to 'x''y'@localhost;
      SHOW CREATE USER 'x''y'@localhost;
      SHOW GRANTS FOR 'x''y'@localhost;
      DROP USER 'x''y'@localhost;
      

      Reported by Ben Bidner (Automattic.com Security Team).

      Attachments

        Issue Links

          Activity

            People

              serg Sergei Golubchik
              serg Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 0d
                  0d
                  Remaining:
                  Remaining Estimate - 0d
                  0d
                  Logged:
                  Time Spent - 0.25d
                  0.25d

                  Git Integration

                    Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.