From: Caolán McNamara <caolan.mcnamara@collabora.com>
Date: Sun, 12 Jul 2026 10:28:48 +0000 (+0000)
Subject: [PATCH] firebird: don't run an attached database's own event triggers
X-Git-Tag: archive/raspbian/4%25.2.3-2+rpi1+deb13u8^2~5
X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=c161d93f35f7545f489f0eb740b4b077dcb54713;p=libreoffice.git

[PATCH] firebird: don't run an attached database's own event triggers

for the embedded and file cases suppress the database's ON CONNECT and
similar event triggers when attaching, they should not fire just because
the document was opened

Change-Id: I37edab43f25d8cb72cc6dcafd743045f96b4c2e6
Signed-off-by: Caolán McNamara <caolan.mcnamara@collabora.com>
Reviewed-on: https://gerrit.collaboraoffice.com/c/core/+/6700
Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
Tested-by: Jenkins CPCI <releng@collaboraoffice.com>
(cherry picked from commit 36335ff89ea2309e99da02b449c9b35517cd6f9d)
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/208029
Tested-by: Jenkins
Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org>
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/208062
Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org>
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/208074
Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org>
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/208110
Tested-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
Reviewed-by: Hossein <hossein@libreoffice.org>

Gbp-Pq: Name CVE-2026-63266-1.diff
---

diff --git a/connectivity/source/drivers/firebird/Connection.cxx b/connectivity/source/drivers/firebird/Connection.cxx
index 9b620d05adf..dad99cd50b8 100644
--- a/connectivity/source/drivers/firebird/Connection.cxx
+++ b/connectivity/source/drivers/firebird/Connection.cxx
@@ -233,8 +233,13 @@ void Connection::construct(const OUString& url, const Sequence< PropertyValue >&
 
             // Do any more dpbBuffer additions here
 
+            // attach without running the database's own event triggers
             if (m_bIsEmbedded || m_bIsFile)
             {
+                dpbBuffer.push_back(isc_dpb_no_db_triggers);
+                dpbBuffer.push_back(1); // 1 byte long
+                dpbBuffer.push_back(1);
+
                 userName = "sysdba"_ostr;
                 userPassword = "masterkey"_ostr;
             }