[MXS-7686] Memory over-read if mysql.user values are corrupt - Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Trivial
Resolution: Fixed
Affects Version/s: 23.02.19, 23.08.15, 24.02.11, 25.01.8, 25.10.4
Fix Version/s: 23.02.20, 23.08.16, 24.02.12, 25.01.9, 25.10.5, 26.10.1
Component/s: Protocol
Labels:
None

Bug Category:
Unexpected results
Release Note Summary:
Corrupt passwords in mysql.user resulted in memory overread which in release builds had no effects.

Description

Having corrupt values in mysql.user results in a memory over-read over data which in both directions of the read is always allocated but which ASAN detects and reports. In release builds, this has no real effect as a user with a corrupt password still gets rejected by MaxScale.

Attachments

Activity

People

Assignee:: markus makela

Reporter:: markus makela

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 6 days ago 20:52

Updated:: 14 hours ago

Resolved:: 14 hours ago

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.