Skip to content

Add dynamic buffers in GetDiagRecs and GetErrorFromHandle and prevent buffer overflow on errors longer than 1024 characters #881

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 13 commits into from
Closed

Add dynamic buffers in GetDiagRecs and GetErrorFromHandle and prevent buffer overflow on errors longer than 1024 characters #881

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
8b4a795
increase error buffer sizes
juliuszsompolski Mar 7, 2021
27cf95b
heap message if stack message is too small
juliuszsompolski Apr 21, 2021
9b4c3d5
error message buffer on heap only
juliuszsompolski Apr 21, 2021
1c07ad0
also do for cursor.cpp GetDiagRecs
juliuszsompolski Apr 21, 2021
4091d91
add long messages to PRINT tests
juliuszsompolski Apr 21, 2021
995aef6
Add BYTE declaration missing from iODBC
gordthompson Mar 10, 2021
14837b3
add pyodbc.pyi stub file
keitherskine Feb 6, 2021
1818e68
executemany type hint correction
keitherskine Feb 7, 2021
053216a
add return statement to GetDiagRecs()
keitherskine Jan 31, 2021
7b8a44f
more rounded PRINT buffer size
keitherskine Feb 5, 2021
499f22b
Merge branch 'master' into long-error-messages
juliuszsompolski Apr 26, 2021
2cd81d8
update tests
juliuszsompolski Apr 26, 2021
d9366a0
WIP: Added PyError_NoMemory
May 29, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/cursor.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -574,7 +574,7 @@ static int GetDiagRecs(Cursor* cur)

ODBCCHAR cSQLState[6]; // five-character SQLSTATE code (plus terminating NULL)
SQLINTEGER iNativeError;
ODBCCHAR cMessageText[10240]; // PRINT statements can be large, hopefully 10K bytes will be enough
ODBCCHAR cMessageText[SHRT_MAX]; // PRINT statements can be large
SQLSMALLINT iTextLength;

SQLRETURN ret;
Expand Down
7 changes: 2 additions & 5 deletions src/errors.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -217,7 +217,7 @@ PyObject* GetErrorFromHandle(Connection *conn, const char* szFunction, HDBC hdbc
SQLSMALLINT cchMsg;

ODBCCHAR sqlstateT[6];
ODBCCHAR szMsg[1024];
ODBCCHAR szMsg[SHRT_MAX];

if (hstmt != SQL_NULL_HANDLE)
{
Expand Down Expand Up @@ -317,14 +317,11 @@ PyObject* GetErrorFromHandle(Connection *conn, const char* szFunction, HDBC hdbc

static bool GetSqlState(HSTMT hstmt, char* szSqlState)
{
SQLCHAR szMsg[300];
SQLSMALLINT cbMsg = (SQLSMALLINT)(_countof(szMsg) - 1);
SQLINTEGER nNative;
SQLSMALLINT cchMsg;
SQLRETURN ret;

Py_BEGIN_ALLOW_THREADS
ret = SQLGetDiagRec(SQL_HANDLE_STMT, hstmt, 1, (SQLCHAR*)szSqlState, &nNative, szMsg, cbMsg, &cchMsg);
ret = SQLGetDiagField(SQL_HANDLE_STMT, hstmt, 1, SQL_DIAG_SQLSTATE, (SQLCHAR*)szSqlState, 5, &cchMsg);
Py_END_ALLOW_THREADS
return SQL_SUCCEEDED(ret);
}
Expand Down