• B
    Fixes additional sql injection vulnerabilities reported by Oliver Jowett · a7a012d1
    Barry Lind 提交于
    and Dmitry Tkach.  Specifically the previous fix still allowed the statement termination character through in unquoted places in the sql statement, and the driver never correctly handled someone passing a value of \0 in a string which under the v2 protocol would end the statement causing the following text to possibly
    be treated as a new sql statement
     Modified Files:
     	jdbc/org/postgresql/Driver.java.in
     	jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
    a7a012d1
AbstractJdbc1Statement.java 69.2 KB