Thanks to Michael Biebl, I was able to nail down the problem. Spamd seems to write NUL-Bytes (0x00, '\0') into the system log. The new imuxsock has a regression in that it no longer does the escaping (including check for NUL-Bytes) that previously happened. I'll now re-enable the escaping code. It may take a little while because I must carefully evaluate how much I would like to change (a totally clean solution may have a lot of potential for new regressions, so I may move this effort to a new devel version instead).
As a side-note, one may think if it is valid that spamd writes these NUL-Bytes. While this is obviously a problem in rsyslogd in the first place, I wonder if it were wiser not to write them. Rainer > -----Original Message----- > From: Rainer Gerhards [mailto:rgerha...@hq.adiscon.com] > Sent: Tuesday, February 22, 2011 9:42 AM > To: Michael Biebl; 614...@bugs.debian.org > Cc: cont...@bugs.debian.org; Florian Ernst > Subject: Bug#614061: rsyslog-mysql: You have an error in your SQL syntax; > check the manual ... > > Just for your information: I have begun to work on this issue and suspect it is > an regression from the imuxsock changes. However, I have unfortunately > not yet been able to reproduce it (but I could not yet try on Debian 6, will do > that shortly). However, I created a new instrumented v5-beta-mysql-test gt > branch and Michael is helping me try it out. > > Rainer > > > -----Original Message----- > > From: Michael Biebl [mailto:bi...@debian.org] > > Sent: Monday, February 21, 2011 2:04 PM > > To: Rainer Gerhards; 614...@bugs.debian.org > > Cc: cont...@bugs.debian.org; Florian Ernst > > Subject: Re: Bug#614061: rsyslog-mysql: You have an error in your SQL > > syntax; check the manual ... > > > > tags 6144061 confirmed > > thanks > > > > Hi Rainer, > > > > Here's another v5 specific problem. > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614061 > > > > Am 20.02.2011 09:06, schrieb Florian Ernst: > > > On Sat, Feb 19, 2011 at 10:46:27PM +0100, Michael Biebl wrote: > > >> Am 19.02.2011 13:14, schrieb Florian Ernst: > > >>> since updating to 5.7.3-1 rsyslog-mysql apparently fails to > > >>> correctly parse / escape some strings. > > >> > > >> Could you please post such example strings? > > > > > > The type of string that led me to noticing this bevavior was > > > included in my original report: the spamd line is the triggering > > > line, the following line is the rsyslog db error message. > > > So far this error only occured on my system with these spamd lines. > > > > > >> Running rsyslog in debug mode might help to track this issue down, too: > > >> Run > > >> rsyslogd -c5 -dn > > >> for this and attach the output to the bug report. > > > > > > Attached, but I replaced my DB password with "ReplacedPassword". > > > > > > > > > > > A debug log is at > > http://bugs.debian.org/cgi- > > bin/bugreport.cgi?msg=15;filename=rsyslog.log;att=1;bug=614061 > > > > I can reproduce the problem here, so if you need more > > information/testing, just let me know. > > -- > > Why is it that all of the instruments seeking intelligent life in the > universe are > > pointed away from Earth?
