From 06c2bcb8fbeb7dba11b95fd3a719cc8bff45741b Mon Sep 17 00:00:00 2001 From: "aleksey.mochalov" Date: Fri, 28 Aug 2026 11:26:13 +0300 Subject: [PATCH] Reject embedded NUL characters in DSQL statements Previously, an embedded NUL was treated as EOF, causing the remainder of the statement to be silently ignored. Report a lexer error instead. --- src/dsql/Parser.cpp | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/dsql/Parser.cpp b/src/dsql/Parser.cpp index e9e69082656..7e1b954b059 100644 --- a/src/dsql/Parser.cpp +++ b/src/dsql/Parser.cpp @@ -407,6 +407,10 @@ int Parser::yylexAux() } SSHORT c = lex.ptr[-1]; + + if (c == '\0') + yyabandon(yyposn, -104, isc_token_err); + UCHAR tok_class = classes(c); char string[MAX_TOKEN_LEN];