Home - Waterfall Grid T-Grid Console Builders Recent Builds Buildslaves Changesources - JSON API - About

Console View


Categories: connectors experimental galera main
Legend:   Passed Failed Warnings Failed Again Running Exception Offline No data

connectors experimental galera main
ffcd09536db8...
ffcd09536db89ce4a1619fe0663db831609d7878
Sergei Golubchik
ssl_info_client without a password hash: COM_QUIT alone if not verified

Without a password hash the client cannot prove that it has verified
the server certificate, it can only say so. It sends COM_QUIT and
the version if it has verified the certificate, and COM_QUIT alone
if it has not.

Assisted-by: Claude:claude-opus-5-5
f6c792a7d785...
f6c792a7d7852b3b0cb220bebc92ce7e151fc485
Oleksandr Byelkin
Merge branch 'bb-11.4-release' into bb-11.8-release
f057e624ec79...
f057e624ec79c53f6eb0a9c8dcdff1eb5ee8bd3e
Oleksandr Byelkin
Merge branch '11.4' into 11.8
c92c8bb53203...
c92c8bb532033d53bd50ee8ac8ee02f170d1723e
Sergei Golubchik
MDEV-40530 require_secure_transport=CLIENT

An account without a password hash (PAM, gssapi, empty password)
cannot prove that the client has verified the server certificate,
so with require_secure_transport=ON it cannot connect over TCP,
unless it requires a client certificate.

require_secure_transport=CLIENT trusts such clients, as
require_secure_transport did before ssl_info_client. Accounts with
a password hash still need a valid ssl_info_client.

my_getopt: an enum that starts with OFF,ON accepts TRUE and FALSE,
like a boolean does, so --require-secure-transport=TRUE still works.

Assisted-by: Claude:claude-opus-5-5
c07ef488d208...
c07ef488d208ff26aed4b9a74e254874a934d899
Sergei Petrunia
MDEV-38274: Unexpectedly large pages_read_count in main.analyze_stmt_prefetch_count

The testcase checked the values of pages_prefetch_read_count and
pages_read_count that InnoDB reported for the query.

The numbers depend on how fast the prefetch thread is in comparison with
the query thread. It can also happen that we request to prefetch a page
but then still have to wait for it to be read, which is counted in
pages_read_count.

Replace the checks in the file with ones that will hold in all
circumstances.
be286c2ea28f...
be286c2ea28f1683dff880d9701e5cdfe9780594
Vladislav Vaintroub
MDEV-30836 MTR hangs on Windows after warnings in the log at shutdown

Follow-up to the MDEV-30836 fix. With --force, parse_protocol()
returned 1 after a worker reported WARNINGS, so the manager went on
reading from the socket of that worker. A worker that was told to
exit with BYE sends WARNINGS and exits, and does not send anything
more.

On Windows Perl, non-blocking reads do not work, so the manager could
block in that read. It then never handled the results of the other
workers, and mtr hung after the last test.

Return 2 for such a worker, as for the other cases where the worker
needs no response, to continue with the next ready socket. The closed
socket is handled later, when it becomes readable.

A worker that was not told to exit also sends WARNINGS, before it
restarts servers or after a test with side effects, and then goes on
to send TESTRESULT. Keep reading from it, as before. The manager
remembers the workers it said BYE to.

Assisted-by: Claude:claude-sonnet-5-5
a375a57915f7...
a375a57915f741235ba30029678b1a35b4eae2eb
rusher
CONC-873: Avoid copying result set metadata on every stmt execution
a03c95670a7b...
a03c95670a7b2b5f3720a558955952711e2ea4eb
Oleksandr Byelkin
Merge branch 'br-11.8-merge' into bb-12.3-release
9dd0aeeaaeb2...
9dd0aeeaaeb20a56c65f6a7765861b222f0509a5
rusher
CONC-875: Read packets directly from the read ahead cache

Assisted-by: Claude Fable 5.1
9a6588147c6c...
9a6588147c6c92fd5b1bbaf4fbb6da889b88aeb4
Vladislav Vaintroub
MDEV-30836 MTR hangs on Windows after warnings in the log at shutdown

Follow-up to the MDEV-30836 fix. With --force, parse_protocol()
returned 1 after a worker reported WARNINGS, so the manager went on
reading from the socket of that worker. A worker that was told to
exit with BYE sends WARNINGS and exits, and does not send anything
more.

On Windows Perl, non-blocking reads do not work, so the manager could
block in that read. It then never handled the results of the other
workers, and mtr hung after the last test.

Return 2 for such a worker, as for the other cases where the worker
needs no response, to continue with the next ready socket. The closed
socket is handled later, when it becomes readable.

A worker that was not told to exit also sends WARNINGS, before it
restarts servers or after a test with side effects, and then goes on
to send TESTRESULT. Keep reading from it, as before. The manager
remembers the workers it said BYE to.

Assisted-by: Claude:claude-sonnet-5-5
8c635526a273...
8c635526a2733bb476d8ae7adba880988ae836ba
Oleksandr Byelkin
Merge branch '11.8' into bb-11.8-release
8a7a28ffc4b9...
8a7a28ffc4b93d02d83e528acca9c80b5469c765
Sergei Golubchik
send ssl_info_client to prove the authentication was not relayed

A MitM can relay the authentication, let the client fail on ssl_info
and keep using the authenticated connection.

* MARIADB_CLIENT_SSL_INFO_CLIENT: set it whenever TLS is used
* after the authentication OK packet send ssl_info_client, the server
  does not reply (but might disconnect in case of active MitM).
86ebbea325ce...
86ebbea325ce3bca3f1f150b96dc802d3b69a8de
Oleksandr Byelkin
main.udf_query_cache fails with Qcache_hits > 0

Since MDEV-33145 FLUSH STATUS resets only session status, so global
Qcache_hits left by earlier tests on the same server was not reset.
Use FLUSH GLOBAL STATUS.

Assisted-By: Claude Opus 5.5 <[email protected]>
804cb2fc246b...
804cb2fc246b4e6e1282de5593351ce63239a648
Vladislav Vaintroub
MDEV-38741 Abort the running statement when its client disconnects

The server notices that a client is gone only when it reads from or
writes to the socket. A statement that waits, for example for an InnoDB
row lock, keeps running, and its transaction keeps its locks.

Watch the client socket from the end of login until the connection ends
or the client sends COM_QUIT, with epoll (Linux), kqueue (BSD, macOS),
or on Windows with WSAEventSelect and an I/O completion port, and the
exit of the client process for a named pipe. When the client has gone,
the watcher sets THD::client_gone. If a command that expects an answer
is running, it is aborted with KILL_CONNECTION. If the connection is
idle, the next such command is aborted when it starts. COM_QUIT and
COM_STMT_CLOSE are not aborted, a client can send them and then quit.
The watcher and the connection thread order their accesses with fences,
no lock is taken for a command. The socket is not shut down, the
connection ends after the error is sent, and the reason, "Client
disconnected", is logged once. An idle connection with the disconnect
noted shows that State in the processlist. Galera connections are not
aborted.

The global variable disconnect_watcher, ON by default, can be set OFF,
which also ends the watches that exist. It exists only where there is a
watcher: Linux, Windows, the BSDs and macOS, not the embedded server.

mysqltest dirty_close takes an optional linger or nolinger argument.

New tests: main.disconnect_*, sys_vars.disconnect_watcher_basic and
mysql_client_test test_disconnect_*. Some rpl and innodb tests are
adjusted to pass with the watcher ON and OFF.

Assisted-by: Claude:claude-sonnet-5-5
753bfee6877c...
753bfee6877c7ba4c5c19e36f4b10766c2d5bc74
Oleksandr Byelkin
Merge branch '11.4' into 11.8
735f3e38a924...
735f3e38a924121a25bdd6b6b34d0ad6fce13497
Oleksandr Byelkin
Merge branch '11.4' into bb-11.4-release
6d485d158ea6...
6d485d158ea6167ed8abcbaca5e3bed53ea1f6c5
rusher
[misc] Decode length encoded integers without nested call
6cc183330f9d...
6cc183330f9d5b8ce10fe46e85e1f098bf3a6125
Oleksandr Byelkin
Fix wsrep.wsrep_off result after MDEV-35867

Failed REPAIR now reports "Operation failed".

Assisted-By: Claude Opus 5.5 <[email protected]>
6ad1e2a05bcd...
6ad1e2a05bcd0a84f1d040f23b427a05cfbae98f
Oleksandr Byelkin
Merge branch 'bb-11.4-release' into bb-11.8-release
6947965d9f80...
6947965d9f804c542915977cee6818c8ed48bc5e
Oleksandr Byelkin
Merge branch '11.8' into 12.3
6236d5052146...
6236d5052146c755f5db624d7f7463c752673653
Hemant Dangi
MDEV-42091: --prepare must not trust plugin_dir from backup-my.cnf

Issue:
backup-my.cnf is part of the backup/transfer directory and can arrive over
an untrusted channel (e.g. a Galera SST stream). --prepare honored its
plugin_dir value as-is, letting whoever supplied the backup redirect
plugin loading to a directory of their choosing.

Solution:
Pass the joiner's own, locally-resolved --plugin-dir on the --prepare
command line: it wins over whatever backup-my.cnf says, regardless of
content, unless the user already chose one explicitly via
inno-apply-opts, which takes priority as a deliberate local choice.
Resolve it by asking the joiner's own mariadbd, which is config- and
compiled-default-aware, falling back to a plain config lookup if that's
unavailable. Add a regression test driving the real SST joiner script
directly: deliver a backup stream whose backup-my.cnf claims an
attacker-chosen plugin_dir, and confirm that directory is never
referenced.
5d45b1b35c19...
5d45b1b35c19e70492368205333c5d4f873231a3
Oleksandr Byelkin
Merge branch '10.11' into 11.4
55f5456e5c31...
55f5456e5c31d38e3e11d030a40167e6451693aa
Oleksandr Byelkin
Merge branch '10.11' into bb-11.4-release
5381e7b3c52f...
5381e7b3c52fb8a374322b90f3af2b9ee7162f75
Sergei Golubchik
MDEV-40530 Bind the client authentication response to the server certificate

MDEV-31855 introduced ssl_info that let the client verify
that it uses the correct certificate. But MitM could hijack the
connection after the authentication - the client will detect it
and disconnect but the server won't and will continue talking
to the attacker. Let's introduce ssl_info_client packet that
enables the server to verify that the client uses the correct
certificate.

When require_secure_transport=ON and the connection isn't local:
* the server sets MARIADB_CLIENT_SSL_INFO_CLIENT in the initial handshake
* the client sets it in the reply, if it understands it
* when both sides have it, the client sends ssl_info_client right
  after the OK packet, acl_authenticate() reads it before the session
  is used (init_connect, audit, etc)
* a connection is rejected unless ssl_info_client is valid, either
  for the server certificate fingerprint or for "CA" (the client
  verified the certificate itself)
* an account without a password hash (plugin has no hash_password()
  or empty password) is rejected unless the account REQUIRE a client
  certificate

Assisted-by: Claude:claude-opus-5-5
48a08ef5338c...
48a08ef5338cd81332f6fc68231e7e11c8ef154c
Oleksandr Byelkin
fix format
416bbff65dc4...
416bbff65dc4d6e9d0d7b06b4e8b4e24d5af0072
Vladislav Vaintroub
MDEV-38741 Abort the running statement when its client disconnects

The server notices that a client is gone only when it reads from or
writes to the socket. A statement that waits, for example for an InnoDB
row lock, keeps running, and its transaction keeps its locks.

Watch the client socket from the end of login until the connection ends
or the client sends COM_QUIT, with epoll (Linux), kqueue (BSD, macOS),
or on Windows with WSAEventSelect and an I/O completion port, and the
exit of the client process for a named pipe. When the client has gone,
the watcher sets THD::client_gone. If a command that expects an answer
is running, it is aborted with KILL_CONNECTION. If the connection is
idle, the next such command is aborted when it starts. COM_QUIT and
COM_STMT_CLOSE are not aborted, a client can send them and then quit.
The watcher and the connection thread order their accesses with fences,
no lock is taken for a command. The socket is not shut down, the
connection ends after the error is sent, and the reason, "Client
disconnected", is logged once. An idle connection with the disconnect
noted shows that State in the processlist. Galera connections are not
aborted.

The global variable disconnect_watcher, ON by default, can be set OFF,
which also ends the watches that exist. It exists only where there is a
watcher: Linux, Windows, the BSDs and macOS, not the embedded server.

mysqltest dirty_close takes an optional linger or nolinger argument.

New tests: main.disconnect_*, sys_vars.disconnect_watcher_basic and
mysql_client_test test_disconnect_*. Some rpl and innodb tests are
adjusted to pass with the watcher ON and OFF.

Assisted-by: Claude:claude-sonnet-5-5
4043ad8aa36d...
4043ad8aa36de2cb3736d7b7938a0cebc1d1a0e3
rusher
Merge branches '3.4-stmt-metadata-copy', '3.4-single-pass-metadata' and '3.4-net-read-fast-path' into 3.4-perf
3d1745037127...
3d1745037127c08e253667d3bfed343a0d0a8e7d
Oleksandr Byelkin
Merge branch '10.11' into 11.4
378f239b8e26...
378f239b8e26a7f1d3d31617029a71b8c4f160c1
Oleksandr Byelkin
Merge branch '11.4' into bb-11.4-release
2eb7c43df419...
2eb7c43df419c0d8803c47c7be01dcfcaae11726
Vladislav Vaintroub
MDEV-30836 MTR hangs on Windows after warnings in the log at shutdown

Follow-up to the MDEV-30836 fix. With --force, parse_protocol()
returned 1 after a worker reported WARNINGS, so the manager went on
reading from the socket of that worker. The worker sends WARNINGS in
reply to BYE and exits, and does not send anything more.

On Windows Perl, non-blocking reads do not work, so the manager could
block in that read. It then never handled the results of the other
workers, and mtr hung after the last test.

Return 2, as for the other cases where the worker needs no response,
to continue with the next ready socket. The closed socket is handled
later, when it becomes readable.

Assisted-by: Claude:claude-sonnet-5-5
26c094ce1c28...
26c094ce1c286813f89ab6cfad5cddb763b6b591
Sergei Golubchik
MDEV-40530 require_secure_transport=CLIENT: the client says it has verified

With require_secure_transport=CLIENT a client without a password hash
must still set MARIADB_CLIENT_SSL_INFO_CLIENT and say that it has
verified the server certificate: ssl_info_client is COM_QUIT and the
version if it has, and COM_QUIT alone if it has not.

This is not a proof, a man in the middle can say it too, but a client
that does not verify the server certificate is rejected and an old
client that does not know ssl_info_client is rejected too.

A client cannot simply abort after the OK packet if it has not
verified the certificate: an account that requires a client
certificate does not need ssl_info_client.

Assisted-by: Claude:claude-opus-5-5
2500f824da95...
2500f824da95f75e65a50f0950235113224a4a54
Oleksandr Byelkin
Merge branch 'bb-11.8-merge' into bb-11.8-release
21d143a806e4...
21d143a806e441139c71a3c75f11d9c533e6f77c
Vladislav Vaintroub
MDEV-30836 MTR hangs on Windows after warnings in the log at shutdown

Follow-up to the MDEV-30836 fix. With --force, parse_protocol()
returned 1 after a worker reported WARNINGS, so the manager went on
reading from the socket of that worker. The worker sends WARNINGS in
reply to BYE and exits, and does not send anything more.

On Windows Perl, non-blocking reads do not work, so the manager could
block in that read. It then never handled the results of the other
workers, and mtr hung after the last test.

Return 2, as for the other cases where the worker needs no response,
to continue with the next ready socket. The closed socket is handled
later, when it becomes readable.

Assisted-by: Claude:claude-sonnet-5-5
206632d1bc5b...
206632d1bc5bcdf7469a5e893a0642e8bf5f6973
Hemant Dangi
MDEV-41158: authenticate the mariabackup SST backup-data stream too

Issue:
The joiner's per-transfer secret was only generated for
ssl-mode=VERIFY_*, and checked only on the small GTID stage: the
backup-data stage itself was accepted unauthenticated, letting any
TCP peer reaching the SST port supply a backup --prepare then runs.

Solution:
Generate the secret unconditionally and require it on the backup-data
stream too, built in lockstep with the existing encrypt/decompress/
progress wrapping so the check can't be silently skipped by it. Add
sst-mariabackup-allow-unauthenticated-donor for rolling upgrades,
failing closed on invalid values; VERIFY_*'s own pre-existing secret
check is unaffected by it. Add a regression test covering the
authenticated pipeline with that wrapping active.
1fa0ce00e060...
1fa0ce00e060e77024ea1d6938b87db3143437f7
rusher
CONC-874: Parse result set column definitions in a single pass

Column definitions were processed twice: mthd_my_read_rows() copied each
packet into an intermediate MYSQL_DATA row set, then unpack_fields()
copied it again into MYSQL_FIELD with six allocations per column.

Assisted-by: Claude Fable 5.1
1a66f1aacedf...
1a66f1aacedf1aaa4fda777d770a4071511e8b87
Oleksandr Byelkin
MDEV-41238 mysqltest PS_bind sends wrong integers on big-endian

PS_bind bound integers as MYSQL_TYPE_LONG (4 bytes) from a long
(8 bytes) buffer, so big-endian platforms sent the high half (0).
Bind them as MYSQL_TYPE_LONGLONG, and doubles as MYSQL_TYPE_DOUBLE
instead of MYSQL_TYPE_DECIMAL.

Assisted-By: Claude Opus 5.5 <[email protected]>
1911084c9d4c...
1911084c9d4cdb2997a71cf847456c86b3715394
Oleksandr Byelkin
Merge branch 'bb-11.4-release' into bb-11.8-release
152c462c1a2a...
152c462c1a2ab29018c71c9cd79ea829d9eb7c71
Oleksandr Byelkin
Merge branch '10.11' into bb-11.4-release
0e86a0d055f1...
0e86a0d055f1bc514946cabd21cf1c8af9a78106
Oleksandr Byelkin
Merge branch '11.4' into 11.8
03b799deb8bf...
03b799deb8bfcfe1435a4b5375b209af2fe26c19
Oleksandr Byelkin
MDEV-40386 DuckDB configure fails in rpm builds

DuckDB's configure checks link with -specs=redhat-package-notes but
without the RPM_* environment, and the linker launcher list was split
into separate cmake arguments. Run DuckDB's cmake under the launcher's
env and pass the launcher with a non-";" list separator.
BuildBot (0.8.9) working for the MariaDB project.
Page built: Sat 07 Nov 2026 15:17:11 (UTC)