• unknown's avatar
    BUG#32111 - Security Breach via DATA/INDEX DIRECORY and RENAME TABLE · 73fc20d1
    unknown authored
    RENAME TABLE against a table with DATA/INDEX DIRECTORY overwrites
    the file to which the symlink points.
    
    This is security issue, because it is possible to create a table with
    some name in some non-system database and set DATA/INDEX DIRECTORY
    to mysql system database. Renaming this table to one of mysql system
    tables (e.g. user, host) would overwrite the system table.
    
    Return an error when the file to which the symlink points exist.
    
    (This is a copy of changeset 2007/11/06 18:09:33+04:00 svoj@mysql.com
    and its merge changesets on the way from 4.0 up to 5.0)
    
    
    mysql-test/r/symlink.result:
      A test case for BUG#32111, with after merge fix, and using proper variable.
    mysql-test/t/symlink.test:
      A test case for BUG#32111, with after merge fix, and using proper variable.
    mysys/my_symlink2.c:
      Return an error when the file to which the symlink points exist.
    73fc20d1
symlink.result 4.78 KB