Re: getref leads to an invalid SELECT

Torsten Bronger writes:
 > Sorry, I forgot to send the number of bytes.  However, what should I
 > send?  len(query_string) is too less, len(query_string)+1 seems to
 > work, len(query_string)+4 seems to be what the Perl client sends (I
 > can barely read Perl).
 > 

This is correct. The length of the query string plus the terminating
NULL bytes is the size of the buffer which refdbd needs to allocate in
order to read the query. However, if you succeed in tricking the
server to send garbage to the database engine, something is wrong on
the server side. I'll have to look into this. refdbd should refuse
getref commands with an improper buffer size.

regards,
Markus

-- 
Markus Hoenicka
[email protected]
(Spam-protected email: replace the quadrupeds with "mhoenicka")
http://www.mhoenicka.de

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H