← Back to branch summary

~ubuntu-branches/ubuntu/natty/mysql-5.1/natty-proposed

« back to all changes in this revision

Viewing changes to mysql-test/t/sp-security.test

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2012-02-22 08:30:45 UTC
  • mfrom: (1.4.1)
  • Revision ID: package-import@ubuntu.com-20120222083045-2rd53r4bnyx7qus4
Tags: 5.1.61-0ubuntu0.11.04.1
https://launchpad.net/bugs/937869
* SECURITY UPDATE: Update to 5.1.61 to fix multiple security issues
  (LP: #937869)
  - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  - CVE-2011-2262
  - CVE-2012-0075
  - CVE-2012-0112
  - CVE-2012-0113
  - CVE-2012-0114
  - CVE-2012-0115
  - CVE-2012-0116
  - CVE-2012-0117
  - CVE-2012-0118
  - CVE-2012-0119
  - CVE-2012-0120
  - CVE-2012-0484
  - CVE-2012-0485
  - CVE-2012-0486
  - CVE-2012-0487
  - CVE-2012-0488
  - CVE-2012-0489
  - CVE-2012-0490
  - CVE-2012-0491
  - CVE-2012-0492
  - CVE-2012-0493
  - CVE-2012-0494
  - CVE-2012-0495
  - CVE-2012-0496

Show diffs side-by-side

added added

removed removed

Lines of Context:
mysql-test/t/sp-security.test
926
926
 
927
927
--echo End of 5.0 tests.
928
928
 
 
929
--echo #
 
930
--echo # Bug#11882603 SELECT_ACL ON ANY COLUMN IN MYSQL.PROC ALLOWS TO SEE
 
931
--echo #              DEFINITION OF ANY ROUTINE. 
 
932
--echo #
 
933
 
 
934
--disable_warnings
 
935
DROP DATABASE IF EXISTS db1;
 
936
--enable_warnings
 
937
 
 
938
CREATE DATABASE db1;
 
939
CREATE PROCEDURE db1.p1() SELECT 1;
 
940
CREATE USER user2@localhost IDENTIFIED BY '';
 
941
GRANT SELECT(db) ON mysql.proc TO user2@localhost;
 
942
 
 
943
--echo # Connection con2 as user2
 
944
connect (con2, localhost, user2);
 
945
--echo # The statement below before disclosed info from body_utf8 column.
 
946
--error ER_SP_DOES_NOT_EXIST
 
947
SHOW CREATE PROCEDURE db1.p1;
 
948
 
 
949
--echo # Check that SHOW works with SELECT grant on whole table
 
950
--echo # Connection default
 
951
connection default;
 
952
GRANT SELECT ON mysql.proc TO user2@localhost;
 
953
 
 
954
--echo # Connection con2
 
955
connection con2;
 
956
--echo # This should work
 
957
SHOW CREATE PROCEDURE db1.p1;
 
958
 
 
959
--echo # Connection default
 
960
connection default;
 
961
disconnect con2;
 
962
DROP USER user2@localhost;
 
963
DROP DATABASE db1;
 
964
 
 
965
 
929
966
# Wait till all disconnects are completed
930
967
--source include/wait_until_count_sessions.inc
931
968