Bug #90010 Protect DD tables from access in init-file during --initialize

• Submitted: 12 Mar 2018 6:15
• Modified: 19 Mar 2018 11:34
• Reporter: Sivert Sørumgård
• Status: Closed
• Category: MySQL Server: Data Dictionary
• Severity: S3 (Non-critical)
• Version: 8.0.11
• OS: Any
• CPU Architecture: Any

[12 Mar 2018 6:15] Sivert Sørumgård

Description:
The DD tables can be accessed from an --init-file if submitted during --initialize. This should be prohibited.

How to repeat:
Access a DD table from an SQL script and submit this as an --init-file during --initialize.

Suggested fix:
Switch thread type when switching query source for SQL statement.

[19 Mar 2018 11:34] Daniel Price

Posted by developer:
 
Fixed as of the upcoming 8.0.11  release, and here's the changelog entry:

Protected data dictionary tables are no longer accessible by statements
placed in a server initialization file.