Mikhail Chalov

Quicklz decompression memory corruption issue fix

7

There is a memory corruption issue inside the quicklz.c source file that ships with Percona XtraBackup. Specifically the problem happens on copying user-supplied binary data over heap allocated memory buffers...

Use memory safe snprintf() in client

17

## Description Replace sprintf(buf, ...) with snprintf(buf, sizeof(buf), ...), where buf is allocated with a size known at compile time. This makes sure we are not writing outside array/string bounds...

Fix insecure use of strcpy, strcat and sprintf in Client and SQL (continues)

2

…tinues) Old style C functions `strcpy()`, `strcat()` and `sprintf()` are vulnerable to security issues due to lacking memory boundary checks. Replace these in the Client and SQL with safe new...

Minimize unsafe C functions usage - replace strcat() and strcpy() - continues

2

## Description Similar to 567b681 continue to replace use of strcat() and strcpy() with safer custom methods safe_strcat() and safe_strcpy(). ## How can this PR be tested? All build stages...