Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-6822

Use better hash function and approach for the Cache key.

    XMLWordPrintable

Details

    • Task
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • None
    • 25.10.4
    • cache
    • None
    • MXS-SPRINT-275

    Description

      The cache hash was calculated using CRC64, which in principle makes it possible to poison the cache. If you know the SELECT you want to poison, you can make another SELECT result in the same CRC, by interspersing the SQL with a suitable pattern of spaces and tabs. This is of concern only if users=mixed is used, which should only be used in a high-trust environment. The CRC64 is now changed to XXH3-128, which removes this possibility.

      Attachments

        Activity

          People

            johan.wikman Johan Wikman
            johan.wikman Johan Wikman
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0d
                0d
                Logged:
                Time Spent - 1h
                1h

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.