Hi Pavel,
On 2016/04/18 22:02, Pavel Raiskup wrote:
> Weird, this should be reproducible almost everywhere, can somebody
> confirm?
>
> Seems like the attached patch should help, though it is a clear revert for
> commit d5374bcc4d58556eb5cc70241c44dcad4d9b441e. As there is no pointer
> from the original fix to any discussion or bug report, I believe this is
> regression and I'm proposing "as is". Can you point me somewhere so we
> can try to find a real fix for the original issue?
The commit handles the bug report
[ODBC] Issue with Money field using ODBC to Access database
posted by John Van De Giessen on Febrary 14.
The bug was introduced in 9.5.0100 and the regression test result maybe
modified.
regards,
Hiroshi Inoue
>>> Hi, fyi, I keep getting...
>>>
>>> + cat ./regression.diffs
>>> *** ./expected/param-conversions.out Sat Apr 9 14:19:08 2016
>>> --- results/param-conversions.out Thu Apr 14 15:44:56 2016
>>> ***************
>>> *** 72,83 ****
>>>
>>> Testing "SELECT 1.3 > ?" with SQL_C_CHAR -> SQL_FLOAT param "3', 'injected, BAD!', '1"...
>>> SQLExecDirect failed
>>> ! 22P02=ERROR: invalid input syntax for type double precision: "3', 'injected, BAD!', '1";
>>> Error while executing the query
>>>
>>> Testing "SELECT 1.4 > ?" with SQL_C_CHAR -> SQL_FLOAT param "4 \'bad', '1"...
>>> SQLExecDirect failed
>>> ! 22P02=ERROR: invalid input syntax for type double precision: "4 \'bad', '1";
>>> Error while executing the query
>>>
>>> Testing "SELECT 1-?" with SQL_C_CHAR -> SQL_INTEGER param "-1"...
>>> --- 72,83 ----
>>>
>>> Testing "SELECT 1.3 > ?" with SQL_C_CHAR -> SQL_FLOAT param "3', 'injected, BAD!', '1"...
>>> SQLExecDirect failed
>>> ! 22P02=ERROR: invalid input syntax for type numeric: "3', 'injected, BAD!', '1";
>>> Error while executing the query
>>>
>>> Testing "SELECT 1.4 > ?" with SQL_C_CHAR -> SQL_FLOAT param "4 \'bad', '1"...
>>> SQLExecDirect failed
>>> ! 22P02=ERROR: invalid input syntax for type numeric: "4 \'bad', '1";
>>> Error while executing the query
>>>
>>> Testing "SELECT 1-?" with SQL_C_CHAR -> SQL_INTEGER param "-1"...
>>> + read line
>>>
>>> ... on Fedora 23. I'll try to look more carefuly next week unless there
>>> is somebody quicker than me.
>>>
>>> Thanks, Pavel
