diff options
| author | Oleksandr Byelkin <sanja@mariadb.com> | 2019-07-26 07:03:39 +0200 |
|---|---|---|
| committer | Oleksandr Byelkin <sanja@mariadb.com> | 2019-07-26 07:03:39 +0200 |
| commit | cf8c2a3c3b2eb05df419ce014b98a71b1e75ad6b (patch) | |
| tree | 0e9c8d48fda7b7494b5d3b220bc6af64e4f3e64a /sql-common | |
| parent | fc77a66c7eb1b8e90753814aa567daeaabd0dd90 (diff) | |
| parent | 584d213235704113cf0d70319c0521d93b8744c6 (diff) | |
| download | mariadb-git-cf8c2a3c3b2eb05df419ce014b98a71b1e75ad6b.tar.gz | |
Merge branch '10.1' into 10.2
Diffstat (limited to 'sql-common')
| -rw-r--r-- | sql-common/client_plugin.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/sql-common/client_plugin.c b/sql-common/client_plugin.c index bd1c8863143..52e0ae03ee1 100644 --- a/sql-common/client_plugin.c +++ b/sql-common/client_plugin.c @@ -362,7 +362,13 @@ mysql_load_plugin_v(MYSQL *mysql, const char *name, int type, mysql->options.extension && mysql->options.extension->plugin_dir ? mysql->options.extension->plugin_dir : PLUGINDIR, "/", name, SO_EXT, NullS); - + + if (strpbrk(name, "()[]!@#$%^&/*;.,'?\\")) + { + errmsg= "invalid plugin name"; + goto err; + } + DBUG_PRINT ("info", ("dlopeninig %s", dlpath)); /* Open new dll handle */ if (!(dlhandle= dlopen(dlpath, RTLD_NOW))) |