Package: asql
Version: 1.5-1
Severity: normal

Hello!

Currently asql incorrectly parses log entries containing \" inside
request, user-agent or referer fields. Such entries may appear in the
logfile due to programming error or break attempt.

Here is an example:
 
59.174.150.65 - - [18/Feb/2010:12:26:18 +0300] 
"\x8f\xaa\x0e6Jm\xff9<\x8e\x0f\x16,\xaf\xcb\xc7\xa2\xeb,\xd4QpM:e\xa8\x9c\x81\x8c^78\x9f\xa8\xa6\x9dE\xc8\xee\x9b\xdf\xc4\x98r!\xa2\x1c\xec\xac\xcd\xe0\xa7Vd\xec\xe0\xcb\xd0Kk\x7f\x95$\xd6\xc2\x05\xd1N\xab\xe2\xe19\xce\xf4\xe4>}i\xac\xd2\x02\x11+'\xa2R]L\x93zM\xe5)\xa9\xe3\xf05\xa4_\v\xa3u\xe1\xe7\"\xfb\x88\x88\xc2\xd7\x02.\xcf\xf3\x1f\xbf\xa6\x0c=l\xc7n\x04\x92,\xffS\xde\xd9\x7fy\xb5\xb5\x0e\xa9\xd3\x98\xef\xa82\xa5\x8b\xc9-\xda\xb9\x1b\xe5\xe5<\xe1\xe49\x8dB"
 400 667 "-" "-"

While rare, such "bad" lines currently lead to broken database entries
(non-numeric result etc).

I'm ready to provide any additional info,
Andrey Paramonov

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (1000, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages asql depends on:
ii  libdbd-sqlite3-perl           1.29-3     Perl DBI driver with a self-contai
ii  libterm-readline-gnu-perl     1.20-1     Perl extension for the GNU ReadLin

asql recommends no packages.

asql suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to