[CONC-429] libmariadb allows invalid plugin names Created: 2019-07-21 Updated: 2019-08-02 Resolved: 2019-08-02 |
|
| Status: | Closed |
| Project: | MariaDB Connector/C |
| Component/s: | None |
| Affects Version/s: | 3.1 |
| Fix Version/s: | 3.1.3 |
| Type: | Bug | Priority: | Blocker |
| Reporter: | Sergei Golubchik | Assignee: | Oleksandr Byelkin |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Issue Links: |
|
||||||||
| Description |
|
During authentication the server tells client what plugin to load. The client does not sanitize plugin names as they're coming from the server. |