S9P crashes when ampersand in title of activity

taziden

Makes me wonder what would happen if the activity is called:

Surf'); DROP TABLE activities;--

Reference: https://xkcd.com/327/

Simon

@taziden

isazi

@simon nice, I will report it to Suunto.

isazi

@simon I cannot reproduce on testing firmware. I created a custom sport mode “Hike & Fly” and it works.

isazi

I can also modify the custom sport mode. Anything in particular you did? The ampersand is not the issue (at least with my app and firmware version).

taziden

@isazi said in S9P crashes when ampersand in title of activity:

@simon I cannot reproduce on testing firmware. I created a custom sport mode “Hike & Fly” and it works.

Unable to reproduce either, using 2.19.42.

Simon

Hmm, I’ll let you know when I discover more.

What I did so far: I created this sport mode with said name. I believe, I did use it once or twice, but when I wanted to use it again some time later, I wasn’t able to select it. Menu > Training > “Hike & Fly” … and the watch just returned to the home screen displaying the time and date.

After that, I tried to edit the sport mode, but the app reported that there was an unexpected error and wouldn’t let me. So, I deleted this sport mode and created it from scratch. Yesterday, when I first selected it in a multi sport activity, the watch crashed.

So, I’m not entirely sure if I can reproduce it easily. For now, I’ve just created a new custom sport mode called “Paragliding”. If that works, the ampersand may have been the culprit … But it’ll take some time for me to properly try it. Not doing a Hike & Fly every day

isazi

@simon okay I will test it with multisport also. Any particular field you were using? Did you update the firmware in between? Android or iOS?

Dimitrios Kanellopoulos

@simon what app version are you using ?

Simon

Yes, I think, the firmware was updated since the custom more was created. Users fields were: speed, lap duration, distance, altitude, HR, altitude gain, vertical speed. I think, that’s all - on two screens.

Latest app version on Android.

Today, I had the chance to try multi sport with the custom mode without ampersand in the name, and it worked. Doesn’t necessarily mean the ampersand is related, of course.