Uploaded image for project: 'MariaDB ColumnStore'
  1. MariaDB ColumnStore
  2. MCOL-1652

DELETE with a non-INT WHERE condition on an INT column fails

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Minor
    • Resolution: Won't Do
    • 1.1.5
    • Icebox
    • DMLProc
    • None
    • Ubuntu 18.04

    Description

      If I delete an escaped statement that contains a single quotation mark through Java PreparedStatements it is deleted in InnoDB tables but not in ColumnStore tables.

      The injection seems fine though.

      I attached Java example code to reproduce the bug.

      Please change the server credentials according to your setup.
      I used a remote connection from Windows 10 to CS on Ubuntu 18.04.

      Error string that is not deleted in CS:

      ab';CREATE TABLE pwnd (i int) engine=columnstore; -- 
      

      Output of the demo:

      number of rows in inno_escape before insert: 0
      number of rows in cs_escape before insert: 0
      number of rows in inno_escape after insert: 1
      number of rows in cs_escape after insert: 1
      number of rows in inno_escape after delete: 0
      number of rows in cs_escape after delete: 1
      

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              jens.rowekamp Jens Röwekamp (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.