tags 308031 patch
thanks
I'm not sure that this is a lot of help, as the fix really is as
straightforward as stated in the original report, but at least this is
another pair of eyes looking at it. This fix looks good to me, and I've
confirmed that the package still builds, although I'm not in a position to
test this particular auth module.
Here's a patch for convenience.
--- auth/sql.c.orig 2005-03-08 14:24:11.000000000 -0800
+++ auth/sql.c 2005-05-13 19:12:38.000000000 -0700
@@ -74,7 +74,7 @@
for (p = (const unsigned char *) ustr; *p; p++)
{
- if (strchr ("'\"", *p))
+ if (strchr ("'\"\\", *p))
len++;
}
@@ -84,7 +84,7 @@
for (p = (const unsigned char *) ustr, q = str; *p; p++)
{
- if (strchr ("'\"", *p))
+ if (strchr ("'\"\\", *p))
*q++ = '\\';
*q++ = *p;
}
--
Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
