[InterNetNews/inn] a5456b: ovsqlite-util: Escape special chars in SQL request

[Julien ÉLIE]

  Branch: refs/heads/2.7
  Home:   https://github.com/InterNetNews/inn
  Commit: a5456bef48fe6a6bcb65f2bd42940ce6a1b31cf1
      https://github.com/InterNetNews/inn/commit/a5456bef48fe6a6bcb65f2bd42940ce6a1b31cf1
  Author: Julien ÉLIE <Julien-Elie at users.noreply.github.com>
  Date:   2026-06-19 (Fri, 19 Jun 2026)

  Changed paths:
    M storage/ovsqlite/ovsqlite-util.in

  Log Message:
  -----------
  ovsqlite-util: Escape special chars in SQL request

The newsgroup name provided with -n was given as-is when using the -i
command.  It could lead to SQL injection.  Let's quote the input.


  Commit: f9901636d485a248f2b60bd97790da932a34d384
      https://github.com/InterNetNews/inn/commit/f9901636d485a248f2b60bd97790da932a34d384
  Author: Julien ÉLIE <Julien-Elie at users.noreply.github.com>
  Date:   2026-06-19 (Fri, 19 Jun 2026)

  Changed paths:
    M storage/ovsqlite/ovsqlite-util.in

  Log Message:
  -----------
  ovsqlite-unit: Fix possible initialization warning

selectrow_array() may return undef if compress is not present.


  Commit: 9596e19357153cdf06a5fe7c323139e55d019055
      https://github.com/InterNetNews/inn/commit/9596e19357153cdf06a5fe7c323139e55d019055
  Author: Julien ÉLIE <Julien-Elie at users.noreply.github.com>
  Date:   2026-06-19 (Fri, 19 Jun 2026)

  Changed paths:
    M storage/ovsqlite/ovsqlite.c

  Log Message:
  -----------
  ovsqlite: Fix zlib decoding

Do like ovsqlite-server does: inflateReset() is called after the check
as it sets avail_out to 0.


  Commit: edce927084ab3e4ed9e2c5367f35a7bc5121324b
      https://github.com/InterNetNews/inn/commit/edce927084ab3e4ed9e2c5367f35a7bc5121324b
  Author: Julien ÉLIE <Julien-Elie at users.noreply.github.com>
  Date:   2026-06-19 (Fri, 19 Jun 2026)

  Changed paths:
    M storage/ovsqlite/sqlite-helper-gen.in

  Log Message:
  -----------
  sqlite-helper-gen: Memorize a variable

$donesect->() may reset $1.


  Commit: 278cf79248f92678ddca83c66e514fd06acea44e
      https://github.com/InterNetNews/inn/commit/278cf79248f92678ddca83c66e514fd06acea44e
  Author: Julien ÉLIE <Julien-Elie at users.noreply.github.com>
  Date:   2026-06-19 (Fri, 19 Jun 2026)

  Changed paths:
    M tests/nnrpd/auth-test

  Log Message:
  -----------
  auth-ext: Rewrite in Perl

The problem with nnrpd/auth-ext is that /bin/sh on OpenBSD, when it
kills itself with SIGUP, doesn't exit like a process killed with SIGHUP
and instead exits with some sort of weird exit status.

Rewrite the shell script in Perl to fix the issue.

close #202


  Commit: 609003e0a003892bf4eee1be3bbf20b6f7bd2544
      https://github.com/InterNetNews/inn/commit/609003e0a003892bf4eee1be3bbf20b6f7bd2544
  Author: Julien ÉLIE <Julien-Elie at users.noreply.github.com>
  Date:   2026-06-19 (Fri, 19 Jun 2026)

  Changed paths:
    M Makefile
    M tests/data/overview/munge-data

  Log Message:
  -----------
  munge-data: Reformat with perltidy

This file was previously missing from the list of Perl scripts.


Compare: https://github.com/InterNetNews/inn/compare/451d31c1a8b1...609003e0a003

To unsubscribe from these emails, change your notification settings at https://github.com/InterNetNews/inn/settings/notifications