Fixed Bug#7043, "SHOW CREATE TABLE security hole".

e5546425 · jani@ua141d10.elisa.omakaista.fi · a0177784 · e5546425
Commit e5546425 authored Dec 07, 2004 by jani@ua141d10.elisa.omakaista.fi
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 1 deletion

sql/sql_parse.cc sql/sql_parse.cc +3 -1

No files found.
--- a/sql/sql_parse.cc
+++ b/sql/sql_parse.cc
@@ -2600,7 +2600,9 @@ unsent_create_error:
 	  check_access(thd, SELECT_ACL | EXTRA_ACL, tables->db,
 		       &tables->grant.privilege,0,0))
 	goto error;
-      res = mysqld_show_create(thd, tables);
+      if (grant_option && check_grant(thd, SELECT_ACL, tables, 2, UINT_MAX, 0))
+	goto error;
+      res= mysqld_show_create(thd, tables);
      break;
    }
 #endif