Skip to content

String length is not checked when inserting large strings > ISC_SHORT #112

@mlazdans

Description

@mlazdans
(function() {
    ibase_query("CREATE TABLE TTEST (VARV VARCHAR(10))");
    ibase_commit();

    // Overflowing ISC_SHORT
    $data = str_repeat("!", 2**15 + 1);
    ibase_query("INSERT INTO TTEST (VARV) VALUES (?)", $data) or die("ibase_query failed");
    dump_table_rows("TTEST");
})();

It overflows or wraps:

Segmentation fault (core dumped)

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions