• Sunanda Menon's avatar
    ------------------------------------------------------------ · f80a925e
    Sunanda Menon authored
    revno: 2861
    committer: Georgi Kodinov <joro@sun.com>
    branch nick: B53371-5.0-bugteam
    timestamp: Mon 2010-05-03 18:16:51 +0300
    message:
      Bug #53371: COM_FIELD_LIST can be abused to bypass table level grants.
      
      The server was not checking the supplied to COM_FIELD_LIST table name
      for validity and compliance to acceptable table names standards.
      Fixed by checking the table name for compliance similar to how it's 
      normally checked by the parser and returning an error message if 
      it's not compliant.
    f80a925e
sql_parse.cc 245 KB