[Libreoffice-bugs] [Bug 119786] New: Database Properties changes Name of the MySQL database string when a "/" is present

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=119786

            Bug ID: 119786
           Summary: Database Properties changes Name of the MySQL database
                    string when a "/" is present
           Product: LibreOffice
           Version: 6.0.4.2 release
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Base
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: gustik at gustik.eu

Description:
In order to connect to a database over MySQL JDBC driver which complains about
the timezone, I need to set serverTimezone variable over
mydbname?serverTimezone="Europe/Vienna".




Steps to Reproduce:
1. Open LibreOffice Base
2. Configure a MySQL server over JDBC driver
3. Pass in ?serverTimezone="Europe/Vienna" as a database name parameter

Actual Results:
Libreoffice Base connects to the DBMS successfully, however, after pressing OK
in the Database Properties window, the the Name of the MySQL database string
gets changed to Vienna. Looks like someone is using a split() function which
filters out all "/" characters and returns the part after "/".

Expected Results:
Should not change the database name string.


Reproducible: Always


User Profile Reset: No



Additional Info:
I would suggest having something like escaping functionality, so that I can say
"Europe/Vienna" without getting the "/" inside of "" filtered out.

Anyway, the connection works, so if this is a security feature, then it is a
bad one, because it works one time, which is enough for a potential attack. The
problem occurs the next time you open the saved libreoffice base file, when it
tries to connect to the database name containing substring after "/".

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180910/303aaaf7/attachment.html>