[MDEV-4505] Buffer overrun when processing --log-bin parameter without file name Created: 2013-05-09  Updated: 2013-05-13  Resolved: 2013-05-13

Status: Closed
Project: MariaDB Server
Component/s: None
Affects Version/s: 10.0.2, 5.5.30
Fix Version/s: 10.0.3, 5.5.31

Type: Bug Priority: Major
Reporter: Pavel Ivanov Assignee: Sergei Golubchik
Resolution: Fixed Votes: 0
Labels: None


 Description   

sql/mysqld.cc:4564:

    if (opt_bin_logname && 
        opt_bin_logname[strlen(opt_bin_logname) - 1] == FN_LIBCHAR)

But when I pass --log-bin without filename the opt_bin_logname is actually an empty string and then the statement accesses invalid memory address. These same code lines work fine on MySQL 5.1, so apparently at some point opt_bin_logname was changed to have empty string instead of NULL.

 Comments   
Comment by Sergei Golubchik [ 2013-05-13 ]

pushed in 5.5

Generated at Thu Feb 08 06:56:57 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.