Prevent null characters from getting into SQLite

[JohnMcPMS]

Fixes #2273

Issue

The root of #2273 and some previous crashes in the same area is that SQLite does not handle null characters in strings in an intuitive way. Specifically, you can insert a string with null characters, but selecting that value out as a string results in a value that is terminates at the first null character. However, equality comparisons against that string value in the database require the full value, including nulls, to be true.

All of this lead to the following:

1. Embedded null characters in the DisplayVersion of an ARP entry were read in
2. This value was inserted into the temporary database holding the system information
3. On selecting the "latest version" from the database, we select all version strings
4. With the highest version value, we select the row id back
   a. Here is where the bug strikes, the selected version string will not equal the value in the database due to the null character
5. The code rolls up to having no installed version despite explicitly being the installed database

The previous mitigation prevented the crash by simply dropping that package from list, but this change allows those entries to show again.

Change

In order to prevent null characters from entering SQLite at all, the string binding functions are updated to throw if an embedded null is present. Additionally, the consistency check is updated to detect strings with embedded null characters.

In order to prevent attempting to send null characters into the database at all, the NormalizedString type used throughout the manifest is updated to also replace any null characters with spaces. This will allow those packages to be listed now.

Validation

Added unit tests covering the changed behaviors.
Manually inserted a null character into a DisplayVersion registry entry on my machine:

PS > winget list test
No installed package found matching input criteria.
PS > wingetdev list test
Name                         Id                                     Version
------------------------------------------------------------------------------
AppInstallerTestExeInstaller {A499DD5E-8DC5-4AD2-911A-BCD0263295E9} 1.0.0.0  1

Microsoft Reviewers: Open in CodeFlow

[yao-msft]

installed

nit: available

[yao-msft]

0x8A150060

0x8A15005A

[yao-msft]