Bug #18310 Server compiled with yassl crash
Submitted: 17 Mar 2006 14:57 Modified: 8 Apr 2006 13:03
Reporter: Magnus Blåudd Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Server Severity:S1 (Critical)
Version:5.1.8 OS:Any (all)
Assigned to: Magnus Blåudd CPU Architecture:Any

[17 Mar 2006 14:57] Magnus Blåudd
Description:
A server compiled with yassl on windows will crash when one of the SSL related functions are used. This problem only appears in 5.1, works fine in 5.0

ssl                            [ fail ]

Errors are (from C:/cygwin/home/mysqldev/pb/mysql-5.1-new/push-andrey@lmy004.-20060317122145.info/mysql-5.1.8-beta-standard/mysql-test/var-n_stm-5/log/mysqltest-time) :
mysqltest: At line 9: query 'SHOW STATUS LIKE 'Ssl_cipher'' failed: 2013: Lost connection to MySQL server during query
(the last lines may be the most important ones)

How to repeat:
Compile on windows and run ./mysql-test-run.pl -do-test=ssl
[21 Mar 2006 14:06] Magnus Blåudd
Also found on linux
[21 Mar 2006 16:10] Bugs System
A patch for this bug has been committed. After review, it may
be pushed to the relevant source trees for release in the next
version. You can access the patch from:

  http://lists.mysql.com/commits/3996
[21 Mar 2006 22:17] Chad MILLER
I don't like truncating a the SSL list silently, so I suggest adding a DBUG notice about an incomplete list when the buffer is filled before the SSL-info list is exhausted.

I don't especially want to restructure the code so that we can resize the buffer to accommodate all the data, but I don't have a suggestion about how to represent the data to the user that some information isn't shown.
[22 Mar 2006 11:33] Magnus Blåudd
Pushed a fix to 5.1.8 that protects against buffer overrun in 'show_ssl_get_cipher_list' that caused the server to crash when a SHOW STATUS was called on a server linked with yaSSL.
[8 Apr 2006 13:03] Jon Stephens
Thank you for your bug report. This issue has been committed to our
source repository of that product and will be incorporated into the
next release.

If necessary, you can access the source repository and build the latest
available version, including the bugfix, yourself. More information 
about accessing the source trees is available at
    http://www.mysql.com/doc/en/Installing_source_tree.html

Additional info:

Documented bugfix in 5.1.8 changelog. Closed.