Bug #18310 | Server compiled with yassl crash | ||
---|---|---|---|
Submitted: | 17 Mar 2006 14:57 | Modified: | 8 Apr 2006 13:03 |
Reporter: | Magnus Blåudd | Email Updates: | |
Status: | Closed | Impact on me: | |
Category: | MySQL Server | Severity: | S1 (Critical) |
Version: | 5.1.8 | OS: | Any (all) |
Assigned to: | Magnus Blåudd | CPU Architecture: | Any |
[17 Mar 2006 14:57]
Magnus Blåudd
[21 Mar 2006 14:06]
Magnus Blåudd
Also found on linux
[21 Mar 2006 16:10]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/3996
[21 Mar 2006 22:17]
Chad MILLER
I don't like truncating a the SSL list silently, so I suggest adding a DBUG notice about an incomplete list when the buffer is filled before the SSL-info list is exhausted. I don't especially want to restructure the code so that we can resize the buffer to accommodate all the data, but I don't have a suggestion about how to represent the data to the user that some information isn't shown.
[22 Mar 2006 11:33]
Magnus Blåudd
Pushed a fix to 5.1.8 that protects against buffer overrun in 'show_ssl_get_cipher_list' that caused the server to crash when a SHOW STATUS was called on a server linked with yaSSL.
[8 Apr 2006 13:03]
Jon Stephens
Thank you for your bug report. This issue has been committed to our source repository of that product and will be incorporated into the next release. If necessary, you can access the source repository and build the latest available version, including the bugfix, yourself. More information about accessing the source trees is available at http://www.mysql.com/doc/en/Installing_source_tree.html Additional info: Documented bugfix in 5.1.8 changelog. Closed.