Skip to content

Fix/dm01 6173 - #635

Closed
liuwei08 wants to merge 2 commits into
masterfrom
fix/DM01-6173
Closed

Fix/dm01 6173#635
liuwei08 wants to merge 2 commits into
masterfrom
fix/DM01-6173

Conversation

@liuwei08

Copy link
Copy Markdown
Contributor

No description provided.

- job.py: use shlex.quote() on source/output args in compress/uncompress
  to prevent shell metacharacter injection; shell=True pipeline preserved
- handler.go: replace bash -c string concat with exec.Command arg list
  in getOutdatedClusters to eliminate maxAge injection path
- auth.py: call g.db.rollback() when last_used_at update fails to avoid
  leaving the connection in an aborted transaction state
migrate.py get_files() used schema_version as a list index (files[n:]),
but schema_version is stored as the actual file number. When the sequence
had a gap (00046 missing), files[47:] on a 47-element list returned [],
silently skipping 00048.sql (secret_read_token table).

Replace slice with numeric filter so gaps are handled correctly.

Fixes: DM01-6184
@liuwei08 liuwei08 closed this Aug 20, 2026
@liuwei08
liuwei08 deleted the fix/DM01-6173 branch August 20, 2026 02:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant