Bug #36275 SQLTables buffer overrun
Submitted: 23 Apr 2008 10:08 Modified: 15 Jul 2008 14:33
Reporter: Patrick Frants
Status: Closed
Category:Connector/ODBC Severity:S2 (Serious)
Version:3.51.25.00 OS:Microsoft Windows (XP)
Assigned to: Jim Winstead Target Version:
Tags: buffer overrun, SQLTables
Triage: D3 (Medium)

File: Maximum allowed size is 500KB.
Description:
Privacy:

If the data you need to attach is more than 500KB, you should create a compressed archive of the data and a README file that describes the data with a filename that includes the bug number (example: bug-data-36275.zip), and use FTP to upload the archive to ftp://ftp.mysql.com/pub/mysql/upload/. Once you have uploaded the file, add a comment to this bug to notify us about it. Note: This directory is unlistable, which means that once you have uploaded your file, you will not be able to see it.

All entries become the exclusive editorial property of Sun Microsystems, Inc.

[28 Apr 2008 19:10] Lawrin Novitsky 
Made buffer allocation dynamic for the one, described in bug, and for the rest I found can
be overrun.

Attachment: bug36275.diff (application/octet-stream, text), 14.20 KiB.
[7 May 2008 17:07] Jim Winstead 
Remove buggy helper functions in catalog.c and fix treatment of identifiers as wildcards

Attachment: bug36275.patch (text/plain), 27.70 KiB.
[10 Jul 2008 19:43] Jim Winstead 
Updated patch including test case and removing handling of  SQL_ALL_* as strings

Attachment: bug36275.patch (text/plain), 30.60 KiB.