Closed Bug 1193278 Opened 9 years ago Closed 9 years ago

Fields containtaing some specific unicode characters are truncated

Categories

(bugzilla.mozilla.org :: Bug Creation/Editing, defect)

Product:
bugzilla.mozilla.org
Component:
Bug Creation/Editing
Version:
Production
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 405011

People

(Reporter: mat, Unassigned)

References

Details

STR: - Submit a bug/comment with the unicode character U+1D306 TETRAGRAM FOR CENTRE in the description Expected Results: - It works fine. Actual results: - The bug/comment is posted but the description is truncated just before the U+1D306 character. I don't have access to error logs, but I suspect this is the same issue described in that blog post: https://mathiasbynens.be/notes/mysql-utf8mb4 I'm marking this as a security issue because I fear it might be possible to exploit the bug to circumvent escaping or string validation in some way. Apologies if I'm wrong here, I don't know the codebase.
Summary: Can't post a comment with some specific unicode characters → Fields containtaing some specific unicode characters are truncated
This is not exploitable. This problem is already fixed upstream, see bug 405011. This bug will be automatically fixed once bmo upgrades to 5.x.
Group: bugzilla-security
Depends on: 974387
Status: NEW → RESOLVED
Closed: 9 years ago
No longer depends on: 974387
Resolution: --- → DUPLICATE
actually bug 868867 isn't related to bmo - that's the upstream bug which doesn't impact us at all. bug 1253535 is what we need.
See Also: https://bugzilla.mozilla.org/show_bug.cgi?id=868867 → https://bugzilla.mozilla.org/show_bug.cgi?id=1253535
You need to log in before you can comment on or make changes to this bug.