Uploaded image for project: 'MariaDB Connector/C++'
  1. MariaDB Connector/C++
  2. CONCPP-153

Query parameters escaping does not consider if parameter data is encoded in multibyte charset

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Blocker
    • Resolution: Fixed
    • 1.1.7, 1.0.6
    • 1.0.7, 1.1.8
    • General
    • None

    Description

      Binary and string parameters in case of client-side prepare are affected. This can lead SQL injection.
      Problematic charsets big5, gbk, sjis, cp932

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. ODBC-494 Incorrect string escaping in case of multibyte charsets

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CONC-819 mysql_real_escape_string incorrectly handles big5

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              Lawrin Lawrin Novitsky
              Lawrin Lawrin Novitsky
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.