Home - Waterfall Grid T-Grid Console Builders Recent Builds Buildslaves Changesources - JSON API - About

Console View


Categories: connectors experimental galera main
Legend:   Passed Failed Warnings Failed Again Running Exception Offline No data

connectors experimental galera main
f4336dcaf6b4...
f4336dcaf6b4e548b05858d70b4f7b74ea235aac
Sergei Golubchik
CONNECT: json_bson_file_priv test fails in --cursor

udf should set max_length large enough to fit the error message
ed3473765f40...
ed3473765f40b54ac68e75c61bc7748d77ce3065
Sergei Golubchik
MDEV-41608 some CONNECT jfile/bfile udfs ignore FILE and secure_file_priv

also they should all have maybe_null=true
ddbd7e9f7d5f...
ddbd7e9f7d5f5e57a1200d20939b2639787f94b6
Sergei Golubchik
cleanup: CONNECT rest.test

no need to run the same CREATE TABLE twice, first to check if it works
and then to test its result
d8700c6694e1...
d8700c6694e16c449c6d0225635b425de26866e0
Sergei Golubchik
CONNECT: more FILE and secure_file_priv checks in udfs

Assisted-by: Claude:claude-opus-5-5
cbd16dca32e2...
cbd16dca32e2219d829efa2f0c659e2c9bc4b768
Sergei Golubchik
update C/C
c90f2191d5c9...
c90f2191d5c9d117046e0a8b05a6652c61b813a9
Jan Lindström
Record test result after protocol change.
befd809c9663...
befd809c96636778a2301016a618194e5f908d68
Vladislav Vaintroub
DEBUG: variants
b758bf5854ac...
b758bf5854ace7a642527d600c2c6479a585a715
Sergei Golubchik
MDEV-41801 "performance_schema" is compared case-sensitively in the engine, case-insensitively elsewhere

With lower_case_table_names=0 the performance_schema engine discovered
its tables only under the exact name, while ACL checks, is_perfschema_db()
and mariadb-dump matched the name case-insensitively. A database named,
for example, PERFORMANCE_SCHEMA was an ordinary database that got
performance_schema access rules.

Compare the name case-insensitively in the engine too.

Assisted-by: Claude:claude-opus-5-5
b097f46c86f2...
b097f46c86f2e7e58eabceb2f132ccea92de9814
Jan Lindström
MDEV-40727 fix test path match, log synced filesystems on all platforms

Match only the trailing test-specific path, not the full literal path.
Remove the non-Linux early return so sync_filesystems() always logs
each flushed filesystem, and verify table content after SST.

Assisted-by: Claude:claude-4.6-sonnet
a604d6f29615...
a604d6f29615dcb34fd6e721049581946e9a6315
Sergei Golubchik
cleanup: CONNECT use a local HTTP server in connect.rest

The test depended on an external site, so it was slow and unreliable.
Serve std_data/bios.json from a forked perl server instead.

Assisted-by: Claude:claude-opus-5-5
a53fb238cf38...
a53fb238cf38659f40a9c42c029dbbd48f3366cd
Sergei Golubchik
MDEV-41808 repeated CTE references keep reparsing exponentially on time and memory

Every reference to a CTE after the first re-parses its specification and
recursively resolves the references inside the clone, so a chain of CTEs
each referencing the previous one twice expands to 2^N re-parses from
linear-size SQL, exhausting CPU and memory at parse time.

Bound the number of specification clones per statement.

Assisted-by: Claude:claude-opus-4-8
a0a30100f1b0...
a0a30100f1b0b0c8775e73cf92816079bf529c38
Sergei Golubchik
MDEV-41603 DECODE_HISTOGRAM crashes when decoding JSON_HB

don't return a pointer to a local buffer
9eb73f775df8...
9eb73f775df81171b8d01eca74e1f7cd2871cc19
Sergei Golubchik
CONNECT: json_bson_file_priv test fails in MSAN

1.
the fix for MDEV-41613 added the first ever test for jfile_bjson().
this UDF allocates structures on the heap and dumps them to a file
with fwrite(). Structures may have padding, bytes in padding stay
not initialized and MSAN gets unhappy when they're fwritten.

Let's clear the allocated memory area for file-writing UDFs

2.
jbin_set_item sends BSON structure as blob in the result set.
So this structure must not have uninitialized bytes either.
985ce425c51c...
985ce425c51cd039951761fa85b6a78eaf250b06
Sergei Golubchik
CONNECT: udfs crash on long filename

namely, json_get_item, jsonget_string, json_set_item, jbin_set_item,
bson_get_item, bsonget_string, bson_set_item

Assisted-by: Claude:claude-opus-5-5
973be45c06b0...
973be45c06b04b11296047fe08f19307cab45a7b
Sergei Golubchik
MDEV-41496 OOB write with RPAD() crash and multi-byte charsets and uservar

Item's charset is metadata, it's known at fix_fields and does not
change later. User variables can violate this invariant if they're
changed and used in the same query.

Let's always wrap such variables in Item_func_conv_charset()
to make sure the caller always gets the same fixed charset, no matter
what the actual variable value is.

Variables that aren't changed in the same query do not get this
unnecessary conversion.

Note that in --ps the charset might resolve differently. This is not a
bug, querying and modifying a user variable in the same query is a
documented UB. But both in nm and in ps both arguments of RPAD() always
have the same charset, so the result is internally consistent and
there's no OOB access.
92cadb7ad00f...
92cadb7ad00f20008abdf6dd692706edb18847b3
Sergei Golubchik
MDEV-41803 mariadb-binlog --raw takes the output file name from Rotate events without checking it

mariadb-binlog --raw appended the file name from a Rotate event to the
--result-file prefix, so a malicious server could make it write files
outside that directory.

Reject a Rotate event file name with a directory component - a
legitimate server only puts a bare file name in the Rotate event

Assisted-by: Claude:claude-opus-5-5
919c978c5996...
919c978c5996f74a4002c03bc348c22155d96126
Aleksey Midenkov
Merge 10.11 into 11.4
8460572b80fb...
8460572b80fbc65168d4c22c31141a6af3308a19
Sergei Golubchik
fix RPAD(), LPAD() and INSERT() not to mangle its arguments

they used to overwrite the charset of their arguments, this is
incorrect and led to wrong results
82e81196e681...
82e81196e681558aab02101dc8a53804ec29fee2
Sergei Golubchik
MDEV-41622 INSERT crashes on deeply nested GeometryCollection

- get_data_size() and init_from_wkb() return their error values on
  stack overrun, not a valid-looking length
- add stack checks to the remaining recursive GeometryCollection
  methods: wkt, json, mbr, area, length, dimension, store_shapes
- test non-GEOMETRY column and SELECT paths

Assisted-by: Claude:claude-opus-5-5
81177b8b07cd...
81177b8b07cd6c7e8f4e12115d8ce13c5c89b112
Sergei Golubchik
MDEV-41613 CONNECT jfile_convert crashes on invalid file

Assisted-by: Claude:claude-opus-5-5
78be54430ce1...
78be54430ce1a33a8ce919ec381b752c471b520c
Georg Richter
Merge branch '3.3-serg' into 3.3
769e1a1fe146...
769e1a1fe146db010e4a47a0a64b6528d78b9609
Sergei Golubchik
CONNECT: reset vptr before writing an object to a file

pointers make no sense there
6c9af3679026...
6c9af3679026ea674ec4cb5d106c8663cb96ffb5
Sergei Golubchik
MDEV-41648 sequence permissions aren't checked in LOAD DATA
6af3505db778...
6af3505db778c16ad4601f54b3020222fca5e2cc
Sergei Golubchik
MDEV-41641 CONNECT REST can bypass FILE protection

only allow http and https schemes for REST
638fbccb7acb...
638fbccb7acbfe64893e2ddcd2bd2c405b96cebc
Sergei Golubchik
check for truncated packets when reading bound parameter values

and clear the error flag on correct values
56d69344f9f1...
56d69344f9f1c5d914e4fa9fa7d093c412983d0f
Sergei Golubchik
cleanup: undefined function declarations
53b31fe59659...
53b31fe59659aea5ec78eef3ca0096f0698e443e
Vladislav Vaintroub
Fix main.grant_repair on Windows when user.MAI ends with Ctrl-Z

The test patches user.MAI from perl, opened in text mode. On Windows
that strips a trailing 0x1A byte on close, so the index file becomes
one byte shorter and the server reports a size mismatch instead of
repairing the table. Open the file raw.

Assisted-by: Claude:claude-sonnet-5-5
51b86a52e79f...
51b86a52e79fa9ddc2e4caedaf9586ae78f49de9
Sergei Golubchik
Item_param::set_param_time and Item_param::set_param_datetime OOB read

Item_param::set_param_time and Item_param::set_param_datetime could
potentially read 4 bytes beyond the value end of the corrupted packet
472d8b6bef74...
472d8b6bef74b983fb6ae15ae93b866cae6b3b89
Sergei Golubchik
UndefinedBehaviorSanitizer: nullptr-with-nonzero-offset rdb_datadic.cc:558
45d639adb541...
45d639adb541007aa84aba66f04547c96115097a
Sergei Golubchik
CONNECT: jfile_bjson/jfile_convert/bfile_bjson/bfile_convert crash on lrecl=NULL

tests for
* constant NULL
* not constant NULL
* not constant not NULL

Assisted-by: Claude:claude-opus-5-5
3c8a386f1ec2...
3c8a386f1ec241f3ed1381e085c2e978a959b039
Sergei Golubchik
CONNECT: fix NULL handling for jfile_bjson/jfile_convert/bfile_bjson/bfile_convert

to be consistent with other functions

Assisted-by: Claude:claude-opus-5-5
33546e8fe31f...
33546e8fe31fc15743a609d0a62a9aa383713241
Sergei Golubchik
CONNECT: rest test fails on Windows with a different error message

Fix Xcurl:

* on linux: wait for the correct (!) child to exit, don't ignore
  its failures (Windows code didn't - this was the reason for a
  different error message)
* drop the redundant linux-only check "does curl exist?", let it
  fail as on Windows, when curl is executed (also that branch
  was missing one pclose())
* use _exit() not exit() - see `man vfork`
* rephrase awkward message
30b43334a390...
30b43334a39060cadf50ab35c14de25f83e08270
Sergei Golubchik
Item_func_decode_histogram::val_str shouldn't modify its arguments
2ee40760baaf...
2ee40760baafaf2b7721dd226fe07b2f00000b53
Sergei Golubchik
MDEV-41804 deeply nested ROWs crash

add check_stack_overrun()
255825423fee...
255825423feeb9126d8da8c02e4b323002ad9210
Sergei Golubchik
MDEV-41822 mariadb-binlog ASAN crash on corrupted binlog

1. verify that the null bitmap length doesn't overshoot row event end
2. pass the buffer length to calc_field_size(), so that it'd never read
  beyond the end
1fd2b59b5b8d...
1fd2b59b5b8dd57f3f5c23d06739d3bc98887ff3
Sergei Golubchik
MDEV-41626 definer check in CREATE PROCEDURE is too lax
1e23cfc38a90...
1e23cfc38a9079cae3ce3d501d9f1222c7aa2b76
Sergei Golubchik
cleanup: CONNECT tests
11e439e372fd...
11e439e372fd6b1a683e23025d4dcf24ed06ab9e
Sergei Golubchik
MDEV-41458 Assertion `n > 0 && n < SINUSES_CALCULATED*2+1' failed in get_n_sincos()

With tiny *ex and *ey the sum of squares underflows and q becomes inf,
use hypot() which is under- and overflow safe.

Also, fix ab/(d*d) divison, for good measure
0fce074f3ff2...
0fce074f3ff24e914cd40294f539375cc1a6f26b
Vladislav Vaintroub
DEBUG: variants fixed
0cb7cf760750...
0cb7cf760750fdd7fb130711bc2d2a6508ac7399
Miroslav Rajcic
Bug#39905057: MySQL ExtractValue unclosed CDATA length underflow causes mysqld heap overflow / crash

Problem:
========
The XML scanner reports an unterminated <![CDATA[ section as a valid
CDATA token. Its end pointer remains at the opening delimiter, while
the parser unconditionally removes the opening and closing delimiters.

This underflows the value length. ExtractValue() can subsequently pass
that length to String::append(), causing a heap overwrite and mysqld
crash.

Root Cause:
===========
my_xml_scan() only sets the token end when it finds ]]>, but
my_xml_parse() assumes every CDATA token is complete.

Solution:
=========
Detect EOF before the CDATA terminator and return a parse error before
calling the XML value handler.

Add an ExtractValue() regression test verifying that unterminated CDATA
is rejected with a warning.

Change-Id: I142bafd9ddea185f6b2e87a80af4894f10168291

Fixes MDEV-39571, MDEV-41407
BuildBot (0.8.9) working for the MariaDB project.
Page built: Tue 27 Oct 2026 11:49:41 (UTC)