I've just uploaded DBD::ODBC 1.26_2 to pause. 1.26_1 contained an unfortunate 
bug for people binding a large number of parameters where an sprintf can 
overflow. Thanks to frew for spotting this and sorry it it inconvenienced 
anyone.

If you do not want to upgrade to 1.26_2 the change is a one liner in dbdimp.c:

--- dbdimp.c    (revision 14506)
+++ dbdimp.c    (working copy)
@@ -3709,7 +3709,7 @@
 
    if (SvNIOK(ph_namesv) ) {                /* passed as a number */
       name = namebuf;
-      my_snprintf(name, sizeof(name), "%d", (int)SvIV(ph_namesv));
+      my_snprintf(name, sizeof(namebuf), "%d", (int)SvIV(ph_namesv));
       name_len = strlen(name);
    }
    else {

Martin
-- 
Martin J. Evans
Easysoft Limited
http://www.easysoft.com

Reply via email to