empathicqubit/Signal-Android
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Escape single quotes in SQLite entries for message backups

Browse source 
Fixes #7491
Closes #7497
This commit is contained in:
junitas 2018-03-10 20:49:44 -05:00 • committed by Moxie Marlinspike
parent fd7a3190f8
commit 7f7aab044c
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/org/thoughtcrime/securesms/backup/FullBackupExporter.java
View file

@ -143,7 +143,7 @@ public class FullBackupExporter extends FullBackupBase {
for (int i=0;i<cursor.getColumnCount();i++) {
if (cursor.getType(i) == Cursor.FIELD_TYPE_STRING) {
statement.append('\'');
statement.append(cursor.getString(i).replace("'", "\\'"));
statement.append(cursor.getString(i).replace("'", "''"));
statement.append('\'');
} else if (cursor.getType(i) == Cursor.FIELD_TYPE_FLOAT) {
statement.append(cursor.getFloat(i));