Commit d6ec3a43 authored by unknown's avatar unknown
Browse files

Merge sanja.is.com.ua:/home/bell/mysql/bk/mysql-5.0 

into sanja.is.com.ua:/home/bell/mysql/bk/work-bug3-5.0
parents 9a03ad15 3d1172a1

mysql-test/r/sp-security.result

+17 −0
Original line number Diff line number Diff line
@@ -194,3 +194,20 @@ use test; 
drop database sptest;

delete from mysql.user where user='usera' or user='userb' or user='userc';

delete from mysql.procs_priv where user='usera' or user='userb' or user='userc';

drop function if exists bug_9503;

create database mysqltest//

use mysqltest//

create table t1 (s1 int)//

grant select on t1 to user1@localhost//

create function bug_9503 () returns int sql security invoker begin declare v int;

select min(s1) into v from t1; return v; end//

use mysqltest;

select bug_9503();

ERROR 42000: execute command denied to user 'user1'@'localhost' for routine 'mysqltest.bug_9503'

grant execute on function bug_9503 to user1@localhost;

do 1;

use test;

REVOKE ALL PRIVILEGES, GRANT OPTION FROM user1@localhost;

drop function bug_9503;

use test;

drop database mysqltest;

mysql-test/r/view.result

+8 −0
Original line number Diff line number Diff line
@@ -1831,3 +1831,11 @@ select * from v1; 
t

01:00

drop view v1;

CREATE VIEW v1 AS SELECT ENCRYPT("dhgdhgd");

SELECT * FROM v1;

drop view v1;

CREATE VIEW v1 AS SELECT SUBSTRING_INDEX("dkjhgd:kjhdjh", ":", 1);

SELECT * FROM v1;

SUBSTRING_INDEX("dkjhgd:kjhdjh", ":", 1)

dkjhgd

drop view v1;

mysql-test/t/sp-security.test

+36 −0
Original line number Diff line number Diff line
@@ -304,3 +304,39 @@ drop database sptest; 
delete from mysql.user where user='usera' or user='userb' or user='userc';

delete from mysql.procs_priv where user='usera' or user='userb' or user='userc';



#

# BUG#9503: reseting correct parameters of thread after error in SP function

#

connect (root,localhost,root,,test);

connection root;



--disable_warnings

drop function if exists bug_9503;

--enable_warnings

delimiter //;

create database mysqltest//

use mysqltest//

create table t1 (s1 int)//

grant select on t1 to user1@localhost//

create function bug_9503 () returns int sql security invoker begin declare v int;

select min(s1) into v from t1; return v; end//

delimiter ;//



connect (user1,localhost,user1,,test);

connection user1;

use mysqltest;

-- error 1370

select bug_9503();



connection root;

grant execute on function bug_9503 to user1@localhost;



connection user1;

do 1;

use test;



connection root;

REVOKE ALL PRIVILEGES, GRANT OPTION FROM user1@localhost;

drop function bug_9503;

use test;

drop database mysqltest;

mysql-test/t/view.test

+12 −0
Original line number Diff line number Diff line
@@ -1673,3 +1673,15 @@ create view v1(k, K) as select 1,2; 
create view v1 as SELECT TIME_FORMAT(SEC_TO_TIME(3600),'%H:%i') as t;

select * from v1;

drop view v1;



#

# using encrypt & substring_index in view (BUG#7024)

#

CREATE VIEW v1 AS SELECT ENCRYPT("dhgdhgd");

disable_result_log;

SELECT * FROM v1;

enable_result_log;

drop view v1;

CREATE VIEW v1 AS SELECT SUBSTRING_INDEX("dkjhgd:kjhdjh", ":", 1);

SELECT * FROM v1;

drop view v1;

sql/item_func.cc

+14 −14
Original line number Diff line number Diff line
@@ -4807,42 +4807,36 @@ Item_func_sp::execute(Item **itp) 
  DBUG_ENTER("Item_func_sp::execute");

  THD *thd= current_thd;

  ulong old_client_capabilites;

  int res;

  int res= -1;

  bool save_in_sub_stmt= thd->transaction.in_sub_stmt;

  my_bool nsok;

#ifndef NO_EMBEDDED_ACCESS_CHECKS

  st_sp_security_context save_ctx;

#endif



  if (! m_sp)

  {

    if (!(m_sp= sp_find_function(thd, m_name, TRUE)))

  if (! m_sp && ! (m_sp= sp_find_function(thd, m_name, TRUE)))

  {

    my_error(ER_SP_DOES_NOT_EXIST, MYF(0), "FUNCTION", m_name->m_qname.str);

      DBUG_RETURN(-1);

    }

    goto error;

  }



  old_client_capabilites= thd->client_capabilities;

  thd->client_capabilities &= ~CLIENT_MULTI_RESULTS;



#ifndef EMBEDDED_LIBRARY

  my_bool nsok= thd->net.no_send_ok;

  nsok= thd->net.no_send_ok;

  thd->net.no_send_ok= TRUE;

#endif



#ifndef NO_EMBEDDED_ACCESS_CHECKS

  if (check_routine_access(thd, EXECUTE_ACL, 

			   m_sp->m_db.str, m_sp->m_name.str, 0, 0))

      DBUG_RETURN(-1);

    goto error_check;

  sp_change_security_context(thd, m_sp, &save_ctx);

  if (save_ctx.changed && 

      check_routine_access(thd, EXECUTE_ACL, 

			   m_sp->m_db.str, m_sp->m_name.str, 0, 0))

  {

    sp_restore_security_context(thd, m_sp, &save_ctx);

    thd->client_capabilities|= old_client_capabilites &  CLIENT_MULTI_RESULTS;

    DBUG_RETURN(-1);

  }

    goto error_check;

#endif

  /*

    Like for SPs, we don't binlog the substatements. If the statement which
@@ -4850,6 +4844,7 @@ Item_func_sp::execute(Item **itp) 
    it's not (e.g. SELECT myfunc()) it won't be binlogged (documented known

    problem).

  */



  tmp_disable_binlog(thd); /* don't binlog the substatements */

  thd->transaction.in_sub_stmt= TRUE;
@@ -4864,16 +4859,21 @@ Item_func_sp::execute(Item **itp) 
                 ER_FAILED_ROUTINE_BREAK_BINLOG,

		 ER(ER_FAILED_ROUTINE_BREAK_BINLOG));



error_check_ctx:

#ifndef NO_EMBEDDED_ACCESS_CHECKS

  sp_restore_security_context(thd, m_sp, &save_ctx);

#endif



  thd->client_capabilities|= old_client_capabilites &  CLIENT_MULTI_RESULTS;



error_check:

#ifndef EMBEDDED_LIBRARY

  thd->net.no_send_ok= nsok;

#endif



  thd->client_capabilities|= old_client_capabilites &  CLIENT_MULTI_RESULTS;



error:

  DBUG_RETURN(res);

}