SQL parsing irregularity when using SQL reader syntax.
J Phelps <[email protected]> Mon, 5 Nov 2012 19:13:03 -0500
| Newsgroups | gmane.lisp.clsql.general |
|---|---|
| Message-ID | <[email protected]> |
Platform: Postgres/Linux Reproduction: (let ((my-string (make-string 1 :initial-element #\Nul))) (select [foo] :from [bar] :where [= [foo] my-string])) You should get an error about an unterminated string constant, caused by the nul character eventually being treated as a C-string terminating nul. Discovered by a hacker who was trying to SQL-inject me.