Bug #11280 Quoting problem in mysqld_multi

Submitted: 13 Jun 2005 9:20 Modified: 4 Sep 2005 3:07
Reporter: Nicolas Baradakis Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Server Severity:S3 (Non-critical)
Version:4.1.12 OS:Any (All)
Assigned to: Jim Winstead CPU Architecture:Any

[13 Jun 2005 9:20] Nicolas Baradakis
Description:
I think there is a problem when mysqld_multi builds the command line
which starts or stops an instance of mysqld. If the value of an option
in my.cnf contains a metacharacter of the shell, weird things happen.
For example, a '>' or a '|' in a password raises errors.

http://lists.mysql.com/internals/25874

How to repeat:
Write unsafe characters in the value of an option of the [mysqld#] section.

[mysqld1]
master-user = replication
master-password = '|&;()<>'

Suggested fix:
Putting quotes around options in the command line could be a wise
thing to do in this case.

--- mysql-4.1.13-nightly-20050610.orig/scripts/mysqld_multi.sh  2005-06-10
+16:29:48.000000000 +0200
+++ mysql-4.1.13-nightly-20050610/scripts/mysqld_multi.sh       2005-06-10
+16:44:55.172526848 +0200
@@ -289,8 +289,7 @@
       }
       else
       {
-       $options[$j]=~ s/;/\\;/g;
-       $tmp.= " $options[$j]";
+       $tmp.= " \'$options[$j]\'";
       }
     }
     if ($opt_verbose && $com =~ m/\/safe_mysqld$/ && !$info_sent)
@@ -374,7 +373,7 @@
   $mysqladmin_found= 0 if (!length($mysqladmin));
   $com = "$mysqladmin";
   $tmp = " -u $opt_user";
-  $tmp.= defined($opt_password) ? " -p$opt_password" : "";
+  $tmp.= defined($opt_password) ? " -p\'$opt_password\'" : "";
   $tmp.= $opt_tcp_ip ? " -h 127.0.0.1" : "";
   for ($j = 0; defined($options[$j]); $j++)
   {
[6 Jul 2005 8:39] Geert Vanderkelen
Hi,

Thanks for the report and thanks for the fix! I was able to reproduce and indeed,
putting single quotes there help.
It is not a feature request tough ;)

Goes for all versions of MySQL coming with mysqld_multi.

Thanks again!

Cheers,
Geert
[27 Aug 2005 0:30] Bugs System
A patch for this bug has been committed. After review, it may
be pushed to the relevant source trees for release in the next
version. You can access the patch from:

  http://lists.mysql.com/internals/28920
[31 Aug 2005 17:22] Bugs System
A patch for this bug has been committed. After review, it may
be pushed to the relevant source trees for release in the next
version. You can access the patch from:

  http://lists.mysql.com/internals/29121
[2 Sep 2005 20:17] Jim Winstead
Fixed in 4.1.15 and 5.0.13.
[4 Sep 2005 3:07] Paul DuBois
Noted in 4.1.15, 5.0.13 changelogs.

Portions of this website are copyright © 2001, 2002 The PHP Group

Page generated in 0.053 sec. using MySQL 8.4.7-u6-cloud

Timestamp references displayed by the system are UTC.
Content reproduced on this site is the property of the respective copyright holders.
It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.