Browse Source

sqlops: do not allow empty name component in URL

Pantelis Kolatsis 2 years ago
parent
commit
b15db86e93
1 changed files with 3 additions and 0 deletions
  1. 3 0
      src/modules/sqlops/sql_api.c

+ 3 - 0
src/modules/sqlops/sql_api.c

@@ -677,6 +677,9 @@ int sql_parse_param(char *val)
 	if(p>in.s+in.len || *p=='\0')
 		goto error;
 	name.len = p - name.s;
+	if(name.len==0) {
+		goto error;
+	}
 	if(*p!='=')
 	{
 		while(p<in.s+in.len && (*p==' ' || *p=='\t' || *p=='\n' || *p=='\r'))