https://bugzilla.redhat.com/show_bug.cgi?id=1234733 Petr Pisar <ppisar@xxxxxxxxxx> changed: What |Removed |Added ---------------------------------------------------------------------------- URL|http://koji.fedoraproject.o |https://github.com/PadreIDE |rg/koji/taskinfo?taskID=101 |/Padre/issues/17 |81132 | --- Comment #1 from Petr Pisar <ppisar@xxxxxxxxxx> --- The error is triggered by DBD-SQLite's commit: commit 7a234eb71b955064ce498e95d6ecc50d1f0580a7 Author: Kenichi Ishigaki <ishigaki@xxxxxxxx> Date: Mon Feb 16 17:41:42 2015 +0900 implemented a "do" shortcut for a special case (no attr, no bind params) (RT-35449) It also adds this code into lib/DBD/SQLite.pm: + # shortcut + if (defined $statement && !defined $attr && !@bind_values) { + # _do() (i.e. sqlite3_exec()) runs semicolon-separate SQL + # statements, which is handy but insecure sometimes. + # Use this only when it's safe or explicitly allowed. + if (index($statement, ';') == -1 or $dbh->FETCH('sqlite_allow_multiple_statements')) { + return DBD::SQLite::db::_do($dbh, $statement); + } + } -- You are receiving this mail because: You are on the CC list for the bug. -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/perl-devel
