Re: [Refdb-users] getref leads to an invalid SELECT

[Markus H. <mar...@mh...>]

Torsten Bronger writes:
 > Sorry, I forgot to send the number of bytes.  However, what should I
 > send?  len(query_string) is too less, len(query_string)+1 seems to
 > work, len(query_string)+4 seems to be what the Perl client sends (I
 > can barely read Perl).
 > 

This is correct. The length of the query string plus the terminating
NULL bytes is the size of the buffer which refdbd needs to allocate in
order to read the query. However, if you succeed in tricking the
server to send garbage to the database engine, something is wrong on
the server side. I'll have to look into this. refdbd should refuse
getref commands with an improper buffer size.

regards,
Markus

-- 
Markus Hoenicka
mar...@ca...
(Spam-protected email: replace the quadrupeds with "mhoenicka")
http://www.mhoenicka.de