Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
2.4
-
None
-
MXS-SPRINT-165
Description
Reproduce steps:
1.Set mysql default auth plugin to caching_sha2_password.
2.create user 'nopass'@'%' identified with mysql_native_password by '';
3. login with -u nopass.
Reason:
The function send_mysql_native_password_response didn't handle user with empty password, it just add a 20-bytes scramble regardless of whether the password is null.
Solve:
After add some ugly code(see attachment), it worked for me.