Duarte Nunes 805ce6e019 cql3/query_processor: Validate presence of statement values timeously ...

We need to validate before calling query_options::prepare() whether
the set of prepared statement values sent in the query matches the
amount of names we need to bind, otherwise we risk an out-of-bounds
access if the client also specified names together with the values.

Refs #3688

Signed-off-by: Duarte Nunes <duarte@scylladb.com>
Message-Id: <20180814225607.14215-1-duarte@scylladb.com>

2018-08-15 10:37:13 +01:00

32 KiB

Raw Blame History

View Raw