Re: [Firebird-devel] SQL Statement Length

[Andy C. <an...@ad...>]

> > It is important for the client application=20
> > to limit the length of SQL statements=20
> > so as to avoid buffer overflow errors.=20
> > Yet I am unable to find any explicit limit=20
> > on SQL statement length in the beta documentation.

> ... currently the client as well as the server=20
> has to be entirely trusted.

I write the client program and I don't trust me. I am not attacking the =
server, but I have been known to shoot myself in the foot. My code =
constructs SQL statements on the fly and then passes them to the API. I =
currently enforce an 8KB limit on length. I don't know how high I can =
go; 32K maybe? Certainly the API should have an strlen() check in the =
gateway to enforce a limit that the rest of the code can handle.