From fc1fbe159afa043d647711c83778d6911e5dfe39 Mon Sep 17 00:00:00 2001
From: Marc Alff <marc.alff@oracle.com>
Date: Fri, 12 Oct 2012 19:38:45 +0200
Subject: Bug#14629232 SECURITY VULNERABILITY WITH SHOW PROFILE

This fix resolves a security vulnerability of SHOW PROFILE.

See the bug report for details.
---
 sql/sql_profile.h | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

(limited to 'sql/sql_profile.h')

diff --git a/sql/sql_profile.h b/sql/sql_profile.h
index b21216f290f..c59b342e502 100644
--- a/sql/sql_profile.h
+++ b/sql/sql_profile.h
@@ -182,6 +182,7 @@ private:
   char *file;
   unsigned int line;
 
+  ulong m_seq;
   double time_usecs;
   char *allocated_status_memory;
 
@@ -213,8 +214,9 @@ private:
   query_id_t profiling_query_id;        /* Session-specific id. */
   char *query_source;
 
-  PROF_MEASUREMENT *profile_start;
-  PROF_MEASUREMENT *profile_end;
+  double m_start_time_usecs;
+  double m_end_time_usecs;
+  ulong m_seq_counter;
   Queue<PROF_MEASUREMENT> entries;
 
 
-- 
cgit v1.2.1