[php-src] PR #24294: Fix GH-24293: Segfault on connect with empty password to MariaDB PAM
| From: | lazerg | Date: | Tue, 13 Oct 2026 12:54:23 +0000 |
| Subject: | [php-src] PR #24294: Fix GH-24293: Segfault on connect with empty password to MariaDB PAM | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39377@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24294
Author: lazerg
With an empty password,
mysqlnd_pam_auth_get_auth_data() returned NULL but still set
the length to 1 for the trailing NUL added in bug #78680, so
php_mysqlnd_change_auth_response_write() copied a byte from a NULL pointer once the
server switched to mysql_clear_password. The buffer is now always allocated, so an
empty password goes out as a single NUL byte. I checked it against MariaDB 11.4 with the PAM setup
from the issue; there's no test since CI has no MariaDB with PAM.
Fixes GH-24293