Uploaded image for project: 'MariaDB Connector/ODBC'
  1. MariaDB Connector/ODBC
  2. ODBC-494

Incorrect string escaping in case of multibyte charsets

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 3.2.8
    • 3.2.9
    • General
    • None

    Description

      Binary parameters in case of client-side prepare(default EDSERVER=0 for SQLExecDirect or PREPONCLIENT=1 for SQLPrepare + SQLExecute) are affected.

      This can lead to SQL injection.
      Problematic charsets big5, gbk, sjis, cp932

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. CONCPP-153 Query parameters escaping does not consider if parameter data is encoded in multibyte charset

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Activity

            People

              Lawrin Lawrin Novitsky
              Lawrin Lawrin Novitsky
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.