[MDEV-8078] Memory disclosure/buffer overread on audit plugin Created: 2015-04-29 Updated: 2015-06-07 Resolved: 2015-06-07 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | Plugin - Audit |
| Affects Version/s: | N/A |
| Fix Version/s: | 5.5.44 |
| Type: | Bug | Priority: | Critical |
| Reporter: | Hans-Joachim Kliemeck | Assignee: | Alexey Botchkov |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | audit, server_audit, verified | ||
| Sprint: | 5.5.44 |
| Description |
|
after executing a query, a buffer overread is happening while writing the query on the audit file. this bug will happen with the current version (1.3.0) the query looks like: SET PASSWORD FOR `monitor`@`localhost` = password('test123'); |
| Comments |
| Comment by Elena Stepanova [ 2015-04-29 ] | |||||
|
Hi, Does it happen always for you, on any SET PASSWORD command? Please paste or attach the output of SHOW VARIABLES. | |||||
| Comment by Hans-Joachim Kliemeck [ 2015-04-29 ] | |||||
|
Does it happen always for you, on any SET PASSWORD command? You've set version 5.5.43, do you mean MySQL 5.5.43, or do you build from sources? Please paste or attach the output of SHOW VARIABLES. | |||||
| Comment by Elena Stepanova [ 2015-04-29 ] | |||||
|
Thanks for clarification. The problem is reproducible with the current version of the plugin from 5.5 tree and MySQL server 5.6 (including 5.6.24). To reproduce, the following is enough:
| |||||
| Comment by Alexey Botchkov [ 2015-06-07 ] | |||||
|
Fixing patch http://lists.askmonty.org/pipermail/commits/2015-June/008010.html |