Bug #18310 Server compiled with yassl crash
Submitted: 17 Mar 2006 15:57 Modified: 8 Apr 2006 15:03
Reporter: Magnus Blaudd
Status: Closed
Category:Server Severity:S1 (Critical)
Version:5.1.8 OS:Any (all)
Assigned to: Magnus Blaudd Target Version:

[17 Mar 2006 15:57] Magnus Blaudd 
Description:
A server compiled with yassl on windows will crash when one of the SSL related functions
are used. This problem only appears in 5.1, works fine in 5.0

ssl                            [ fail ]

Errors are (from
C:/cygwin/home/mysqldev/pb/mysql-5.1-new/push-andrey@lmy004.-20060317122145.info/mysql-5.1.8-beta-standard/mysql-test/var-n_stm-5/log/mysqltest-time)
:
mysqltest: At line 9: query 'SHOW STATUS LIKE 'Ssl_cipher'' failed: 2013: Lost connection
to MySQL server during query
(the last lines may be the most important ones)

How to repeat:
Compile on windows and run ./mysql-test-run.pl -do-test=ssl
[21 Mar 2006 15:06] Magnus Blaudd 
Also found on linux
[21 Mar 2006 17:10] Bugs System 
A patch for this bug has been committed. After review, it may
be pushed to the relevant source trees for release in the next
version. You can access the patch from:

  http://lists.mysql.com/commits/3996
[21 Mar 2006 23:17] Chad MILLER 
I don't like truncating a the SSL list silently, so I suggest adding a DBUG notice about
an incomplete list when the buffer is filled before the SSL-info list is exhausted.

I don't especially want to restructure the code so that we can resize the buffer to
accommodate all the data, but I don't have a suggestion about how to represent the data
to the user that some information isn't shown.
[22 Mar 2006 12:33] Magnus Blaudd 
Pushed a fix to 5.1.8 that protects against buffer overrun in 'show_ssl_get_cipher_list'
that caused the server to crash when a SHOW STATUS was called on a server linked with
yaSSL.
[8 Apr 2006 15:03] Jon Stephens 
Thank you for your bug report. This issue has been committed to our
source repository of that product and will be incorporated into the
next release.

If necessary, you can access the source repository and build the latest
available version, including the bugfix, yourself. More information 
about accessing the source trees is available at
    http://www.mysql.com/doc/en/Installing_source_tree.html

Additional info:

Documented bugfix in 5.1.8 changelog. Closed.