diff options
| author | Erlend Egeberg Aasland <erlend.aasland@innova.no> | 2021-08-05 07:22:08 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-08-05 07:22:08 (GMT) |
| commit | 8f010dc920e1f6dc6a357e7cc1460a7a567c05c6 (patch) | |
| tree | dab59bd945360b0d2e153fcaa47f64d5ee964f51 /Modules | |
| parent | 3e4cb7f40f28f1c49e0e4c3e841549c53065af3c (diff) | |
| download | cpython-8f010dc920e1f6dc6a357e7cc1460a7a567c05c6.zip cpython-8f010dc920e1f6dc6a357e7cc1460a7a567c05c6.tar.gz cpython-8f010dc920e1f6dc6a357e7cc1460a7a567c05c6.tar.bz2 | |
bpo-44822: Don't truncate `str`s with embedded NULL chars returned by `sqlite3` UDF callbacks (GH-27588)
Diffstat (limited to 'Modules')
| -rw-r--r-- | Modules/_sqlite/connection.c | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/Modules/_sqlite/connection.c b/Modules/_sqlite/connection.c index f75cf83..aae6c66 100644 --- a/Modules/_sqlite/connection.c +++ b/Modules/_sqlite/connection.c @@ -519,10 +519,17 @@ _pysqlite_set_result(sqlite3_context* context, PyObject* py_val) } else if (PyFloat_Check(py_val)) { sqlite3_result_double(context, PyFloat_AsDouble(py_val)); } else if (PyUnicode_Check(py_val)) { - const char *str = PyUnicode_AsUTF8(py_val); - if (str == NULL) + Py_ssize_t sz; + const char *str = PyUnicode_AsUTF8AndSize(py_val, &sz); + if (str == NULL) { return -1; - sqlite3_result_text(context, str, -1, SQLITE_TRANSIENT); + } + if (sz > INT_MAX) { + PyErr_SetString(PyExc_OverflowError, + "string is longer than INT_MAX bytes"); + return -1; + } + sqlite3_result_text(context, str, (int)sz, SQLITE_TRANSIENT); } else if (PyObject_CheckBuffer(py_val)) { Py_buffer view; if (PyObject_GetBuffer(py_val, &view, PyBUF_SIMPLE) != 0) { |