Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-5543

MyISAM repair unsafe usage of TMD files

Details

    • Bug
    • Status: Closed (View Workflow)
    • Critical
    • Resolution: Fixed
    • 5.1.67, 5.2.14, 5.3.12, 5.5.34, 10.0.7
    • 5.5.35, 10.0.8, 5.1.73, 5.2.15, 5.3.13
    • None
    • None

    Description

      When MyISAM repairs a table it creates a temporary file (tablename.TMD) that will later be renamed to tablename.MYD. Due to insufficient checks it is possible to trick MyISAM into creating a TMD file in the protected location (such as datadir).

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-19883 [MIPS] repair_symlink-5543 fails: ELOOP is 90

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            serg Sergei Golubchik created issue -
            serg Sergei Golubchik made changes -
            Field Original Value New Value
            Affects Version/s 5.1.67 [ 12100 ]
            Affects Version/s 5.2.14 [ 12101 ]
            Affects Version/s 5.3.12 [ 12000 ]
            serg Sergei Golubchik made changes -
            Fix Version/s 5.3.13 [ 12602 ]
            Fix Version/s 5.2.15 [ 12601 ]
            Fix Version/s 5.1.69 [ 12600 ]
            serg Sergei Golubchik made changes -
            Description When MyISAM repairs a table it creates a temporary file (tablename.TMD) that will later be renamed to tablename.MYD. When MyISAM repairs a table it creates a temporary file (tablename.TMD) that will later be renamed to tablename.MYD. Due to insufficient checks it is possible to trick MyISAM into creating a TMD file in the protected location (such as datadir).
            serg Sergei Golubchik made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            serg Sergei Golubchik made changes -
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Closed [ 6 ]
            dbart Daniel Bartholomew added a comment -

            http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.61

            dbart Daniel Bartholomew added a comment - http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.61
            serg Sergei Golubchik made changes -
            Workflow defaullt [ 33701 ] MariaDB v2 [ 42435 ]
            ratzpo Rasmus Johansson (Inactive) made changes -
            Workflow MariaDB v2 [ 42435 ] MariaDB v3 [ 61386 ]
            anel Anel Husakovic made changes -
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 61386 ] MariaDB v4 [ 147417 ]

            People

              serg Sergei Golubchik
              serg Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.