• Ramil Kalimullin's avatar
    Fix for bug #53907: Table dump command can be abused to dump arbitrary tables. · b2d40809
    Ramil Kalimullin authored
    Problem: one with SELECT privilege on some table may dump other table
    performing COM_TABLE_DUMP command due to missed check of the table name.
    
    Fix: check the table name.
    
    
    sql/sql_parse.cc:
      Fix for bug #53907: Table dump command can be abused to dump arbitrary tables.
        - check given table name performing COM_TABLE_DUMP command.
    tests/mysql_client_test.c:
      Fix for bug #53907: Table dump command can be abused to dump arbitrary tables.
        - test case.
    b2d40809
sql_parse.cc 245 KB