1. 28 Sep, 2016 2 commits
    • Sergei Petrunia's avatar
    • Sergei Petrunia's avatar
      MDEV-10649: Optimizer sometimes use "index" instead of "range" access for UPDATE · a53f3c6d
      Sergei Petrunia authored
      (Fixing both InnoDB and XtraDB)
      
      Re-opening a TABLE object (after e.g. FLUSH TABLES or open table cache
      eviction) causes ha_innobase to call
      dict_stats_update(DICT_STATS_FETCH_ONLY_IF_NOT_IN_MEMORY).
      
      Inside this call, the following is done:
        dict_stats_empty_table(table);
        dict_stats_copy(table, t);
      
      On the other hand, commands like UPDATE make this call to get the "rows in
      table" statistics in table->stats.records:
      
        ha_innobase->info(HA_STATUS_VARIABLE|HA_STATUS_NO_LOCK)
      
      note the HA_STATUS_NO_LOCK parameter. It means, no locks are taken by
      ::info() If the ::info() call happens between dict_stats_empty_table
      and dict_stats_copy calls, the UPDATE's optimizer will get an estimate
      of table->stats.records=1, which causes it to pick a full table scan,
      which in turn will take a lot of row locks and cause other bad
      consequences.
      a53f3c6d
  2. 27 Sep, 2016 9 commits
  3. 26 Sep, 2016 4 commits
  4. 24 Sep, 2016 1 commit
  5. 23 Sep, 2016 1 commit
  6. 22 Sep, 2016 1 commit
    • Sergey Vojtovich's avatar
      MDEV-10315 - Online ALTER TABLE may get stuck in tdc_remove_table · e56a5392
      Sergey Vojtovich authored
      There was race condition between online ALTER TABLE and statements performing
      TABLE_SHARE release without marking it flushed (e.g. in case of table cache
      overflow, SET @@global.table_open_cache, manager thread purging table cache).
      
      The reason was missing mysql_cond_broadcast().
      e56a5392
  7. 20 Sep, 2016 1 commit
    • Vicențiu Ciorbaru's avatar
      Fix tokudb jemalloc linking · 83d5b963
      Vicențiu Ciorbaru authored
      Linking tokudb with jemalloc privately causes problems on library
      load/unload. To prevent dangling destructor pointers, link with the same
      library as the server is using.
      83d5b963
  8. 19 Sep, 2016 1 commit
  9. 13 Sep, 2016 2 commits
  10. 12 Sep, 2016 4 commits
  11. 11 Sep, 2016 2 commits
  12. 10 Sep, 2016 2 commits
  13. 06 Sep, 2016 1 commit
  14. 05 Sep, 2016 1 commit
  15. 02 Sep, 2016 1 commit
  16. 29 Aug, 2016 1 commit
  17. 26 Aug, 2016 1 commit
  18. 25 Aug, 2016 5 commits
    • Daniel Bartholomew's avatar
      bump the VERSION · 39ec5ac4
      Daniel Bartholomew authored
      39ec5ac4
    • Sivert Sorumgard's avatar
      Bug#24388753: PRIVILEGE ESCALATION USING MYSQLD_SAFE · 48bd8b16
      Sivert Sorumgard authored
      [This is the 5.5/5.6 version of the bugfix].
      
      The problem was that it was possible to write log files ending
      in .ini/.cnf that later could be parsed as an options file.
      This made it possible for users to specify startup options
      without the permissions to do so.
      
      This patch fixes the problem by disallowing general query log
      and slow query log to be written to files ending in .ini and .cnf.
      48bd8b16
    • Jon Olav Hauglid's avatar
      Bug#24388746: PRIVILEGE ESCALATION AND RACE CONDITION USING CREATE TABLE · 4e547386
      Jon Olav Hauglid authored
      During REPAIR TABLE of a MyISAM table, a temporary data file (.TMD)
      is created. When repair finishes, this file is renamed to the original
      .MYD file. The problem was that during this rename, we copied the
      stats from the old file to the new file with chmod/chown. If a user
      managed to replace the temporary file before chmod/chown was executed,
      it was possible to get an arbitrary file with the privileges of the
      mysql user.
      
      This patch fixes the problem by not copying stats from the old
      file to the new file. This is not needed as the new file was
      created with the correct stats. This fix only changes server
      behavior - external utilities such as myisamchk still does
      chmod/chown.
      
      No test case provided since the problem involves synchronization
      with file system operations.
      4e547386
    • Terje Rosten's avatar
      Bug#24464380 PRIVILEGE ESCALATION USING MYSQLD_SAFE · 684a165f
      Terje Rosten authored
      Argument to malloc-lib must be included in restricted list of
      directories, symlink guards added, and mysqld and mysqld-version
      options restricted to command line only. Don't redirect errors to
      stderr.
      684a165f
    • Monty's avatar
      DEV-10595 MariaDB daemon leaks memory with specific query · ee97274c
      Monty authored
      The issue was that in some extreme cases when doing GROUP BY,
      buffers for temporary blobs where not properly cleared.
      ee97274c