FIX: SQLExecute on a Prepared Statement with SQL_NOSCAN_ON Causes Client-Side AV (308401)

MORE INFORMATION

Steps to Reproduce Behavior

1. Create the following tables on SQL Server:

   CREATE TABLE emp4(NAME char(30),  Memo1 text)
   					

2. Copy the code that follows into a Microsoft Visual C++ console application, and then compile the code. Note that you need to change the data source name, user ID, and password.

   #include <stdio.h>
   #include <string.h>
   #include <windows.h>
   #include <sql.h>
   #include <sqlext.h>
   #include <odbcss.h>
   #define TEXTSIZE    12000
   SQLHENV        henv = SQL_NULL_HENV;
   SQLHDBC        hdbc1 = SQL_NULL_HDBC;     
   SQLHSTMT        hstmt1 = SQL_NULL_HSTMT;
   char * stmt = "INSERT INTO emp4 VALUES('Paul Borm',?)";
   
   int main() {
       RETCODE retcode;
       // SQLBindParameter variables.
       SDWORD        cbTextSize, lbytes;
       // SQLParamData variable.
       PTR            pParmID;
       // SQLPutData variables.
       UCHAR    Data[] = 
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz"
               "abcdefghijklmnopqrstuvwxyz";
       SDWORD    cbBatch = (SDWORD)sizeof(Data)-1;
        // Allocate the ODBC environment and save handle.
       retcode = SQLAllocHandle (SQL_HANDLE_ENV, NULL, &henv);
       // Let ODBC know this is an ODBC 3.0 app.
       retcode = SQLSetEnvAttr(henv, SQL_ATTR_ODBC_VERSION,
                               (SQLPOINTER) SQL_OV_ODBC3, SQL_IS_INTEGER);
       // Allocate ODBC connection handle and connect.
       retcode = SQLAllocHandle(SQL_HANDLE_DBC, henv, &hdbc1);
       retcode = SQLConnect(hdbc1, (UCHAR *)"sql32", SQL_NTS,
                  (UCHAR *)"sa", SQL_NTS, (UCHAR *)"mdacsa", SQL_NTS);
       // Allocate statement handle.
       retcode = SQLAllocHandle(SQL_HANDLE_STMT, hdbc1, &hstmt1);
   	retcode = SQLSetStmtAttr(hstmt1,SQL_ATTR_NOSCAN, (SQLPOINTER)SQL_NOSCAN_ON, 0);
   	retcode = SQLPrepare(hstmt1, (UCHAR *)stmt, SQL_NTS);
       // Set parameters based on total data to send.
       lbytes = (SDWORD)TEXTSIZE;
       cbTextSize = SQL_LEN_DATA_AT_EXEC(lbytes);
       // Bind the parameter marker.
       retcode = SQLBindParameter(hstmt1,    // hstmt
               1,                            // ipar
               SQL_PARAM_INPUT,                // fParamType
               SQL_C_CHAR,                    // fCType
               SQL_LONGVARCHAR,                // FSqlType
               lbytes,                        // cbColDef
               0,                            // ibScale
               (VOID *)1,                    // rgbValue
               0,                            // cbValueMax
               &cbTextSize);                // pcbValue
       // Execute the command.
   	retcode = SQLExecute(hstmt1);
       // Check to see if NEED_DATA; if yes, use SQLPutData.
       retcode = SQLParamData(hstmt1, &pParmID);
       if (retcode == SQL_NEED_DATA)
       {
           while (lbytes > cbBatch)
           {
               SQLPutData(hstmt1, Data, cbBatch);
               lbytes -= cbBatch;
           }
           // Put final batch.
           SQLPutData(hstmt1, Data, lbytes); 
       }
       else
       {
              printf("SQLPutData Failed\n\n");
              return(9);
       }
       // Make final SQLParamData call.
       retcode = SQLParamData(hstmt1, &pParmID);
       /* Clean up. */ 
       SQLFreeHandle(SQL_HANDLE_STMT, hstmt1);
       SQLDisconnect(hdbc1);
       SQLFreeHandle(SQL_HANDLE_DBC, hdbc1);
       SQLFreeHandle(SQL_HANDLE_ENV, henv);
       return(0);
   
   }