[ODBC-277] Memory Corruption from Incorrect Type for SQL_IDENTIFIER_CASE Created: 2020-04-06 Updated: 2020-08-25 Resolved: 2020-04-06 |
|
| Status: | Closed |
| Project: | MariaDB Connector/ODBC |
| Component/s: | General |
| Affects Version/s: | 3.1.6 |
| Fix Version/s: | 3.1.7 |
| Type: | Bug | Priority: | Major |
| Reporter: | Juan | Assignee: | Lawrin Novitsky |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Description |
|
If you call SQLGetInfo(SQL_IDENTIFIER_CASE) and pass a short (the correct size for SQL_IDENTIFIER_CASE), then the MariaDB 32bit ODBC interface will corrupt memory because it assumes (incorrectly) that SQL_IDENTIFIER_CASE is a long. Note that this is not a problem with the MySQL interface. |
| Comments |
| Comment by Lawrin Novitsky [ 2020-04-06 ] |
|
The fix has been pushed in the commit 9d638c8(added testcase that fits description in the comment) |