diff --git a/projects/rocprofiler-sdk/source/lib/output/generateRocpd.cpp b/projects/rocprofiler-sdk/source/lib/output/generateRocpd.cpp index 3e4406b35e..a08bdbf6e3 100644 --- a/projects/rocprofiler-sdk/source/lib/output/generateRocpd.cpp +++ b/projects/rocprofiler-sdk/source/lib/output/generateRocpd.cpp @@ -329,7 +329,10 @@ insert_value(std::string_view _name, const Tp& _value, TraitT = {}) return sql_insert_value{_name, std::string{"NULL"}}; } } - return sql_insert_value{_name, fmt::format("'{}'", _value)}; + // Sanitize string values before embedding into SQL to escape quotes and remove + // problematic control/separator characters. + auto _sanitized = sanitize_sql_string(std::string{_value}); + return sql_insert_value{_name, fmt::format("'{}'", _sanitized)}; } else {