Postgres Pro
Downloads
Home   >   mailing lists

Re: SQL injection bug for null-terminated strings? - Mailing list pgsql-jdbc

From Kris Jurka
Subject Re: SQL injection bug for null-terminated strings?
Date
Msg-id Pine.LNX.4.33.0309010629390.27036-100000@leary.csoft.net
Whole thread Raw
In response to SQL injection bug for null-terminated strings?  (joe user <palehaole@yahoo.com>)
Responses Re: SQL injection bug for null-terminated strings?  (Barry Lind <blind@xythos.com>)
List pgsql-jdbc
Tree view 

On Sun, 31 Aug 2003, joe user wrote:

> >From looking at some logs, it looks like there might
> be an SQL injection bug with null-terminated strings.
> Is this a known problem?  If it is not, I will try to
> write a test program to trigger it.
>

This has been fixed in the development version of the driver.

See the following, check revision 1.29


http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/interfaces/jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java

Kris Jurka

pgsql-jdbc by date:

Previous
From: Kris Jurka
Date:
Subject: Re: Further getLastOID() woes
Next
From: "Juan Diego Hernandez Fonseca"
Date:
Subject: unsuscribe