archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-16 05:58:45 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
php-src/ext/pdo_odbc
History
Exact
Christoph M. Becker c9eafc1954
Fix GH-16450: PDO_ODBC can inject garbage into field values 
A previous bug fix[1] relied on ODBC drivers to properly count down the
`StrLen_or_IndPtr` argument for consecutive calls to `SQLGetData()`.
Apparently, not all drivers handle this correctly, so we cannot assert
they do.  Instead we fall back to the old behavior for drivers which
would violate the assertion.

A test against SQLServer (which we currently use in CI) would not make
sense, since the respective drivers do not exhibit that behavior.
Instead we target the regression test especially to a MS Access
database.

Since there is apparently no way to easily create an MS Access database
programmatically, we commit a minimal empty DB which is used for the
regression test, and could also be used by other test cases.

[1] <bccca0b53a>

Closes GH-16587.
2024-10-31 16:15:17 +01:00
..
tests Fix GH-16450: PDO_ODBC can inject garbage into field values 2024-10-31 16:15:17 +01:00
config.m4 Remove conditional calls of always available macros 2019-07-14 22:24:21 +02:00
config.w32
CREDITS
odbc_driver.c add PDO::ATTR_AUTOCOMMIT to getAttribute 2023-12-18 00:26:32 +00:00
odbc_stmt.c Fix GH-16450: PDO_ODBC can inject garbage into field values 2024-10-31 16:15:17 +01:00
pdo_odbc.c Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_pdo_odbc.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_pdo_odbc_int.h Remove use of SDWORD and SWORD in ODBC extensions (GH-14457) 2024-06-04 12:46:19 -03:00