From 4484f5f620adbc871763a97dc5d85e37e2cdc2f2 Mon Sep 17 00:00:00 2001 From: Adrian Jones Date: Mon, 8 Apr 2024 19:01:37 -0700 Subject: [PATCH] Fix uninitialized string offset This can happen if you include an unpaired single or double quote, eg: SELECT * FROM table_name WHERE field_name = 'test --- adminer/sql.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/adminer/sql.inc.php b/adminer/sql.inc.php index 7a21235d..216e36e2 100644 --- a/adminer/sql.inc.php +++ b/adminer/sql.inc.php @@ -87,7 +87,7 @@ if (!$error && $_POST) { $query .= fread($fp, 1e5); } else { $offset = $match[0][1] + strlen($s); - if ($s[0] != "\\") { + if (!$s || $s[0] != "\\") { break; } }