43a162ea567f47a89b8d4a506d2995740737b79/g o/vt/vtgate/vindexes/hash.go#L139 var blockDES cipher.Block func init() { var err error blockDES, err = des.NewCipher(make([]byte, 8)) if err != nil { panic(err) Register("hash", NewHash) } 19 Vitess Security Audit, 2023 func vhash(shardKey uint64) []byte { var keybytes, hashed [8]byte binary.BigEndian.PutUint64(keybytes[:], shardKey) blockDES.Encrypt(hashed[:] error) { if len(k) != 8 { return 0, fmt.Errorf("invalid keyspace id: %v", hex.EncodeToString(k)) } var unhashed [8]byte blockDES.Decrypt(unhashed[:], k) return binary.BigEndian.Uint64(unhashed[:]), nil

system var Record statement No call remember-sets remember-sets SET system var Record statement No call remember-sets reserved SET system var Record statement Execute reserved inTx SET system var Record Record statement ReserveExecute reserved-inTx reserved-inTx SET system var Record statement Execute reserved-inTx remember-sets Query ReserveExecute reserved reserved Query Execute reserved reserved-inTx Query set_var EASYRSA_DN "org" set_var EASYRSA_REQ_COUNTRY "US" set_var EASYRSA_REQ_PROVINCE "California" set_var EASYRSA_REQ_CITY "Mountain View" set_var EASYRSA_REQ_ORG "PlanetScale Inc" set_var EASYRSA_REQ_EMAIL

select * from user where id in (1, 2) 
 SelectScatte r select * from user where id = 1 and var = 2 or var = 3 
 SelectKeyran ge select * from user where keyrange(1, 2) and a = 1 重写之后， 变成： select

that make changes to the connection’s session scope. This includes: • SET SESSION var=x • CREATE TEMPORARY TABLE • SET @var=x The exception to this, is that Vitess maintains a whitelist statements that MySQL TUPLE specifies a a tuple. This cannot be returned in a QueryResult, but it can be sent as a bind var. Properties: 28, None. GEOMETRY 2077 GEOMETRY specifies a GEOMETRY type. Properties: 29, IsQuoted.

that make changes to the connection’s session scope. This includes: • SET SESSION var=x • CREATE TEMPORARY TABLE • SET @var=x The exception to this, is that Vitess maintains a whitelist statements that MySQL TUPLE specifies a a tuple. This cannot be returned in a QueryResult, but it can be sent as a bind var. Properties: 28, None. GEOMETRY 2077 GEOMETRY specifies a GEOMETRY type. Properties: 29, IsQuoted.

system var Record statement No call remember-sets remember-sets SET system var Record statement No call remember-sets reserved SET system var Record statement Execute reserved inTx SET system var Record Record statement ReserveExecute reserved-inTx reserved-inTx SET system var Record statement Execute reserved-inTx remember-sets Query ReserveExecute reserved reserved Query Execute reserved reserved-inTx Query

system var Record statement No call remember-sets remember-sets SET system var Record statement No call remember-sets reserved SET system var Record statement Execute reserved inTx SET system var Record Record statement ReserveExecute reserved-inTx reserved-inTx SET system var Record statement Execute reserved-inTx remember-sets Query ReserveExecute reserved reserved Query Execute reserved reserved-inTx Query

system var Record statement No call remember-sets remember-sets SET system var Record statement No call remember-sets reserved SET system var Record statement Execute reserved inTx SET system var Record Record statement ReserveExecute reserved-inTx reserved-inTx SET system var Record statement Execute reserved-inTx remember-sets Query ReserveExecute reserved reserved Query Execute reserved reserved-inTx Query

that make changes to the connection’s session scope. This includes: • SET SESSION var=x • CREATE TEMPORARY TABLE • SET @var=x The exception to this, is that Vitess maintains a whitelist statements that MySQL