* andrey@stripped <andrey@stripped> [08/02/12 20:06]:
> ChangeSet@stripped, 2008-02-12 18:49:03+02:00, andrey@stripped +3 -0
> Fix for Bug#29605
> --local-infile=0 checks can be bypassed by sending a FETCH LOCAL FILE response
>
> Add a check for CLIENT_LOCAL_FILES before sending a local file.
> Beware, that all binary distributions enable sending of local files and it's up
> to the programs which use libmysql to disable it, if they don't use this
> functionality.
> Otherwise they are not safe.
>
OK to push. (I assume Holyfoot is good as well).
--
-- Konstantin Osipov Software Developer, Moscow, Russia
-- MySQL AB, www.mysql.com The best DATABASE COMPANY in the GALAXY