Commit 06986da3 authored by mkanat%bugzilla.org's avatar mkanat%bugzilla.org

Bug 355709: [PostgreSQL] Crash when querying the DB

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
parent faa0b904
......@@ -1632,7 +1632,7 @@ sub GetByWordListSubstr {
foreach my $word (split(/[\s,]+/, $strs)) {
if ($word ne "") {
$sql_word = $dbh->quote($word);
trick_taint($word);
trick_taint($sql_word);
push(@list, $dbh->sql_position(lc($sql_word),
"LOWER($field)") . " > 0");
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment