Anna wrote:
> This doesn't seem related. I explained the problem in the
> mail above but I can try to explain it more clearly if needed.

sorry, I reread you post and it was clear enough. the confusion
was all mine.


> Here is the ticket:
> http://trac.osgeo.org/grass/ticket/1633

it seems a bit strange that the contents of a varchar string
are able to break the GUI. maybe in this case it's possible to
work around it, but in general seems like a deeper problem,
vulnerable to sql injection style issues and the current parsing
method may need to be revisited.
  http://en.wikipedia.org/wiki/Sql_injection

(not that grass is in any way safe from buffer overflows and
sql or shell script injections, but we should try to fix these
where we notice them since they make the code more robust)


Hamish
_______________________________________________
grass-dev mailing list
grass-dev@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/grass-dev

Reply via email to