Bug 355709: [PostgreSQL] Crash when querying the DB

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

diff --git a/Bugzilla/Search.pm b/Bugzilla/Search.pm
index 7c0fe7fdd572cbb33384b573a97ed73b083153cf..d0b0cd6ba1585741ddf29d73a3dcedaa2593d251 100644 (file)
--- a/Bugzilla/Search.pm
+++ b/Bugzilla/Search.pm
@@ -1632,7 +1632,7 @@ sub GetByWordListSubstr {
     foreach my $word (split(/[\s,]+/, $strs)) {
         if ($word ne "") {
             $sql_word = $dbh->quote($word);
-            trick_taint($word);
+            trick_taint($sql_word);
             push(@list, $dbh->sql_position(lc($sql_word),
                                            "LOWER($field)") . " > 0");
         }