Microsoft ODBC bug

Alan DeKok aland at deployingradius.com
Fri Jul 5 08:04:31 CEST 2019


On Jul 4, 2019, at 5:10 PM, Dom Latter <freeradius-users at latter.org> wrote:
> Anyway, I have run ltrace to grab calls to the MS ODBC driver, from both
> freeradius and a small python test script (which doesn't exhibit this
> weird bug).
> 
> These are the calls (sorted alphabetically) that are used by Freeradius:
> ...
> And these are the ones used by Python:
> ...
> What is noticeably absent from the freeradius output is SQLExecDirect

  That function is likely implemented in the library as a series of lower-layer calls.

> (the 'W' in the Python output just means it's Unicode); this despite
> that I have put debug output immediately before and after the line
> in the FR module that says:
> 
> err_handle = SQLExecDirect(conn->stmt, odbc_query, strlen(query));
> 
> so I know it is doing it... or trying to... or something.

  The question is what magic parameters to send to ODBC which say "don't do stupid things with numbers".

  Alan DeKok.




More information about the Freeradius-Users mailing list