Home - Waterfall Grid T-Grid Console Builders Recent Builds Buildslaves Changesources - JSON API - About

Console View


Categories: connectors experimental galera main
Legend:   Passed Failed Warnings Failed Again Running Exception Offline No data

connectors experimental galera main
f93ec1983fc6...
f93ec1983fc65c7cc0adedf015b48f1512ec7339
Sergei Golubchik
reject out of range rec_per_key in replay context

Index_statistics::set_avg_frequency() casts rec_per_key * 100000 to
ulonglong, which is undefined for negative or too large values.

Reject them when parsing the context.

Assisted-by: Claude:claude-5.5-opus
f6c792a7d785...
f6c792a7d7852b3b0cb220bebc92ce7e151fc485
Oleksandr Byelkin
Merge branch 'bb-11.4-release' into bb-11.8-release
f420bd4249bb...
f420bd4249bbe4cfb6b5b10e94793160b4ec76b3
Sergei Golubchik
MDEV-41541 uninitialized memory read in optimizer replay

init all frequencies - not all of them might be present in the replay
d553b2dd4cfe...
d553b2dd4cfe8c56c37c0d4623698b57331fd3da
Sergei Golubchik
disable DuckDB in the server in favor of the externally built

Fixes #6045
c6f1ec22e412...
c6f1ec22e412e0af22582b3188ac16d9b57edad9
Sergei Golubchik
CONNECT: JSON/BSON/MongoDB discovery overflows column name and path buffers

JSONDISC::Find, BSONDISC::Find, CMGDISC::FindInDoc and JMGDISC::ColDesc
built column names and JSON paths in colname[65] and fmt[129] with
strncat() whose size argument wrapped around once the buffer was full,
or with a bare strcpy(), so long or deeply nested keys wrote past the
buffers. A top-level key of 64 characters or more was copied with
strncpy() and left colname unterminated.

Add PlugAppend() that appends with safe_strcat() and fails with
"Column name or path too long" if the result does not fit, and use
it for all these buffers.

Assisted-by: Claude:claude-opus-5-5
c3119e390519...
c3119e390519b5326fb472f48a90de1815f9f461
Yuchen Pei
MDEV-40808 Zero the new tmp TABLE_LIST struct in close_cached_connection_tables_callback

Otherwise garbage non-NULL view field would result in garbage view_db
field returned in get_db_name which would cause crash in
Lex_ident_fs::check_db_name().

If we simply initialise a NULL view field, the garbage non-NULL
derived field would cause the tables->is_anonymous_derived_table() to
return true and skip the tmp table created in
close_cached_connection_tables_callback so the open HANDLER is not
closed and `tdc_remove_table()` waits forever for the session's own
reference.
c2110aac9651...
c2110aac96515478cf748d63004ab0af8e3a805a
Oleksandr Byelkin
Merge branch 'bb-11.8-release' into bb-12.3-release
b25f3e321c99...
b25f3e321c99195bb79f7c961306b486891ae19a
Sergei Golubchik
cleanup: don't malloc every single String for every single byte
a217f67f6836...
a217f67f683603f7adad564f77c255d2fc3b436b
Oleksandr Byelkin
Merge branch '10.11' into 11.4
9975aefe95be...
9975aefe95be2f6e0372c637fe2a38d1f58bcf3b
Oleksandr Byelkin
Merge branch 'bb-12.3-release' into bb-13.1-release
8e739ec33613...
8e739ec336137cdc835a9d3f726f288d8756b20b
Oleksandr Byelkin
new columnstore 25.10.8
86523d901286...
86523d9012866f02e5d8d483f0a8128474cea985
Sergei Golubchik
MDEV-40374 I_S.metadata_lock_info shows schema/table that user has no privileges on

Apply the SHOW PROCESSLIST visibility rule: without PROCESS a user
sees only locks held by threads of the same account. That is enough
to find who blocks one's own statement in the case where the user
can KILL the blocker.

Assisted-by: Claude:claude-opus-5-5
813c3e8a4651...
813c3e8a4651a00a24a24ea943bf5f2a4996f1df
Sergei Golubchik
replay infuses statistics into INFORMATION_SCHEMA tables

fill_schema_table_by_open() opens and closes tables in the middle of
the statement. set_statistics_for_table() in get_schema_stat_record()
infused replayed statistics into them, which then went back to the
table cache before the replay restored them, and I_S.STATISTICS
showed the replayed cardinality.

Disable the replay while I_S opens tables.

Assisted-by: Claude:claude-5.5-opus
7b288ee5e7d1...
7b288ee5e7d199a259c3e559d898497db5b7fd11
Oleksandr Byelkin
Merge branch '13.1' into bb-13.1-release
7968e33c3e29...
7968e33c3e29c2552117e243db5c2cf9f003a4d8
Sergei Golubchik
MDEV-41946 CONNECT: table option value used as printf format string, crash in ha_connect::GetRealString

For partitioned tables GetRealString() and FileExists() substituted
the partition name into FILE_NAME (and other options) by passing the
option value to snprintf() as the format string.

Replace the first "%s" with the partition name and copy the rest
literally, as already done for SRCDEF.

Assisted-by: Claude:claude-opus-5-5
735f3e38a924...
735f3e38a924121a25bdd6b6b34d0ad6fce13497
Oleksandr Byelkin
Merge branch '11.4' into bb-11.4-release
672dbe816b3e...
672dbe816b3e5686ce9f4d1da321845fba317814
Sergei Golubchik
MDEV-39615 CONNECT: Privilege validation gap

A CONNECT sub-table of PROXY, TBL, XCL, OCCUR, PIVOT was opened
in-process without any privilege check, so a user with CREATE could
read and write any existing CONNECT table, including file-based ones
that otherwise require FILE.

Check privileges on the sub-table as if it were used directly instead
of the PROXY table, like in a SQL SECURITY INVOKER view: SELECT, INSERT,
SELECT+UPDATE or SELECT+DELETE depending on the mode, plus the
sub-table's own FILE privilege checks. Info commands fail silently,
as for other sub-table errors.

Non-CONNECT sub-tables are still accessed via a client connection with
the table's credentials.

Assisted-by: Claude:claude-5.5-opus
5d65e04b9483...
5d65e04b94837778c6a25191ad2b6e67904fb91d
Dave Gosselin
MDEV-41746:  IN-subquery not allowed with OFFSET

Prevent OFFSET from appearing in IN, ALL, or ANY subqueries with
error ER_NOT_SUPPORTED_YET.  This mirrors how we prevent LIMIT
from appearing in similar queries.

Previously, OFFSET queries within IN-subqueries could return
wrong results if for example the OFFSET was past the end of the
table.

Also print OFFSET n ROWS when there is no FETCH clause.  Before,
view definitions and EXPLAIN EXTENDED omitted such an OFFSET.  Views
and derived tables with such an OFFSET are no longer merged into the
outer query because merging discarded the OFFSET.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
370b01e45697...
370b01e45697d1d583f0f378d6aaa1ff4662e4b2
Sergei Golubchik
MDEV-40730 SHOW DATABASES allows users with only GRANT OPTION privilege to read all databases names

Followup for MDEV-37951, GRANT OPTION is an *OPTION* and alone on
itself shouldn't make the table or schema visible
22c1ef436b7e...
22c1ef436b7e9752b8dba0dd3703504a1df5cdb5
Sergei Golubchik
UBSAN: runtime error: downcast of address 0x7ea259447dc8 which does not point to an object of type 'Item_row'

sql/item_cmpfunc.h:1184:34: runtime error: downcast of address 0x7ea259447dc8 which does not point to an object of type 'Item_row'
sql/item_cmpfunc.cc:2083:30: runtime error: member call on address 0x7ea259447dc8 which does not point to an object of type 'Item_row'
sql/item_cmpfunc.cc:2084:29: runtime error: member call on address 0x7ea259447dc8 which does not point to an object of type 'Item_row'
sql/item_cmpfunc.cc:2125:29: runtime error: member call on address 0x7ea259447dc8 which does not point to an object of type 'Item_row'
sql/item_cmpfunc.cc:2127:35: runtime error: member call on address 0x7ea259447dc8 which does not point to an object of type 'Item_row'

Indeed, the address was pointing to an object of type 'Item_aggregate_ref'
210c57988e5d...
210c57988e5dab9fcf98891208c029c7669505cb
Sergei Golubchik
MDEV-41944 CONNECT CSV discovery header overflows colname[]/len[]/typ[]/prc[]

CSVColumns() stored a column name pointer for every separator in the
header line without checking MAXCOL, so a header with more than 200
fields wrote past the end of the colname[] stack array, and the
resulting column count indexed len[], typ[], prc[] out of bounds.

Reject such headers with TOO_MANY_FIELDS, the same way data lines
are rejected.

Assisted-by: Claude:claude-opus-5-5
20f27639cfa0...
20f27639cfa05f1c2175701f97b23cea491b6154
Sergei Golubchik
replay loses infused statistics in stored functions

Every sub-statement (stored function, trigger) replaced
thd->opt_ctx_replay, leaking the top-level one, so the top-level
tables were never restored and kept key_info->read_stats pointing
into the freed statement mem_root. Saved and infused statistics were
allocated on whatever arena was active, e.g. the stored function
execution arena, freed before the restore.

* create the replay object only for a top-level statement, and let
  sub-statements use it; restore only at the end of the top-level one
* allocate everything the replay object owns in its own MEM_ROOT
* empty the saved list after restoring

Assisted-by: Claude:claude-5.5-opus
19906247ebe7...
19906247ebe7bbf1b3c1f6656bd24997fcc3492b
Sergei Golubchik
compilation failure

storage/innobase/row/row0import.cc:678:17: error: conversion from 'uint32_t' {aka 'unsigned int'} to 'uint16_t' {aka 'short unsigned int'} may change value [-Werror=conversion]
  678 |                ? 0 : FSP_FLAGS_GET_ZIP_SSIZE(m_space_flags);
13a98bf11bde...
13a98bf11bde9101fd1c633d0b2dbfe283e3a156
Sergei Golubchik
replay leaves stale index statistics after DELETE

A table can be infused twice per statement (DELETE without WHERE on an
engine without delete_all_rows() calls set_statistics_for_table() twice).
The second save holds the first infused Index_statistics as "original",
and restore_modified_table_stats() restored it last, leaving
key_info->read_stats pointing into the freed statement mem_root.

Restore in the reverse order of saving.

Assisted-by: Claude:claude-5.5-opus
11ae41ca1b3f...
11ae41ca1b3fcd926a7a7b2d3936f489e8c2f8a9
Sergei Golubchik
CONNECT: CSV table discovery does not check the FILE privilege

connect_assisted_discovery() checks the FILE privilege before reading
the file for FMT, DBF, XML, INI, VEC, REST, JSON and BSON tables, but
not for CSV, so a user without FILE could make CSVColumns() open and
parse any file.

Add TAB_CSV to the list.

Assisted-by: Claude:claude-opus-5-5
BuildBot (0.8.9) working for the MariaDB project.
Page built: Sun 01 Nov 2026 12:47:41 (UTC)