[FB-Tracker] Created: (CORE-2724) Validate or transform string of DML queries so that engine internals doesn't receive malformed strings

View: New views
1 Messages — Rating Filter:   Alert me  

[FB-Tracker] Created: (CORE-2724) Validate or transform string of DML queries so that engine internals doesn't receive malformed strings

by JIRA tracker@firebirdsql.org :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Validate or transform string of DML queries so that engine internals doesn't receive malformed strings
------------------------------------------------------------------------------------------------------

                 Key: CORE-2724
                 URL: http://tracker.firebirdsql.org/browse/CORE-2724
             Project: Firebird Core
          Issue Type: Improvement
          Components: Charsets/Collation, Engine
            Reporter: Adriano dos Santos Fernandes
             Fix For: 3.0 Alpha 1


It has been verified that malformed text of queries may come to engine internals and later be stored in BLOBs without validation.

This situation happened with DDL triggers, and possible happens with monitoring tables too.

The solution adopted depends on the attachment charset used:
- If it's NONE, non-ASCII characters are transformed to question marks
- Otherwise, the string is checked for malformed characters

This happens only for DML. For DDL, it will prevent the command to succeed as before.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tracker.firebirdsql.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
Firebird-Devel mailing list, web interface at https://lists.sourceforge.net/lists/listinfo/firebird-devel