Searching with "@" crashes sqlite FTS

Open burntcookie90 opened this issue 4 years ago • 1 comments

dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo dodo

search for anything with "@" in it.

dodo                      | org.sqlite.SQLiteException: [SQLITE_ERROR] SQL error or missing database (fts5: syntax error near "@") |     at org.sqlite.core.DB.newSQLException(DB.java:1012) |     at org.sqlite.core.DB.newSQLException(DB.java:1024) |     at org.sqlite.core.DB.execute(DB.java:866) |     at org.sqlite.jdbc3.JDBC3PreparedStatement.executeQuery(JDBC3PreparedStatement.java:77) |     at com.squareup.sqldelight.sqlite.driver.SqliteJdbcPreparedStatement.executeQuery$sqldelight_jdbc_driver(JdbcDriver.kt:144) |     at com.squareup.sqldelight.sqlite.driver.JdbcDriver.executeQuery(JdbcDriver.kt:71) |     at com.jakewharton.dodo.db.dodo.TweetIndexQueriesImpl$SearchQuery.execute(DatabaseImpl.kt:424) |     at com.squareup.sqldelight.Query.executeAsList(Query.kt:134) |     at com.jakewharton.dodo.Dodo$search$2.invokeSuspend(app.kt:71) |     at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33) |     at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106) |     at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:571) |     at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:738) |     at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:678) |     at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:665) | 2021-03-02 22:47:03.886 [nioEventLoopGroup-4-1] ERROR ktor.application - Unhandled: GET - / | org.sqlite.SQLiteException: [SQLITE_ERROR] SQL error or missing database (fts5: syntax error near "@") |     at org.sqlite.core.DB.newSQLException(DB.java:1012) |     at org.sqlite.core.DB.newSQLException(DB.java:1024) |     at org.sqlite.core.DB.execute(DB.java:866) |     at org.sqlite.jdbc3.JDBC3PreparedStatement.executeQuery(JDBC3PreparedStatement.java:77) |     at com.squareup.sqldelight.sqlite.driver.SqliteJdbcPreparedStatement.executeQuery$sqldelight_jdbc_driver(JdbcDriver.kt:144) |     at com.squareup.sqldelight.sqlite.driver.JdbcDriver.executeQuery(JdbcDriver.kt:71) |     at com.jakewharton.dodo.db.dodo.TweetIndexQueriesImpl$SearchQuery.execute(DatabaseImpl.kt:424) |     at com.squareup.sqldelight.Query.executeAsList(Query.kt:134) |     at com.jakewharton.dodo.Dodo$search$2.invokeSuspend(app.kt:71) |     at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33) |     at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106) |     at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:571) |     at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:738) |     at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:678) |     at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:665)

                                    
                                    
                                        
                                            
                                            
                                                Mar 03
                                                '21  13:03
                                            
                                            
                                                burntcookie90


                                                                    
                                    
                                        
https://sqlite.org/fts5.html#fts5_strings
We need to automatically quote input

                                    
                                    
                                        
                                            
                                            
                                                Mar 04
                                                '21  03:03
                                            
                                            
                                                JakeWharton