Skip to content

Fix parsing ClickHouse string with \ at end#153

Merged
serprex merged 1 commit intomainfrom
fix-oob-parsing
Feb 26, 2026
Merged

Fix parsing ClickHouse string with \ at end#153
serprex merged 1 commit intomainfrom
fix-oob-parsing

Conversation

@serprex
Copy link
Copy Markdown
Member

@serprex serprex commented Feb 24, 2026

No description provided.

@serprex serprex requested a review from theory February 24, 2026 14:26
Copy link
Copy Markdown
Collaborator

@theory theory left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you add a test case?

@serprex
Copy link
Copy Markdown
Member Author

serprex commented Feb 24, 2026

@theory test case would require intermediate proxy to emit malicious string; ClickHouse won't generate a string that'd hit this code path

or we include UDF that parses text as CH string

@theory
Copy link
Copy Markdown
Collaborator

theory commented Feb 24, 2026

Unit testing is super hard with Postgres extensions. I've no objection, can do without a test case.

@serprex serprex merged commit b4cca8b into main Feb 26, 2026
41 of 42 checks passed
@serprex serprex deleted the fix-oob-parsing branch February 26, 2026 18:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants