June 2020 - hibernate-issues - Jboss List Archives

[JIRA] (HHH-14043) Two concurrent element shifts in a list damage database integrity.

by Christian Beikov (JIRA)

Christian Beikov ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *commented* on HHH-14043 ( https://hibernate.atlassian.net/browse/HHH-14043?atlOrigin=eyJpIjoiOWYwMT... ) Re: Two concurrent element shifts in a list damage database integrity. ( https://hibernate.atlassian.net/browse/HHH-14043?atlOrigin=eyJpIjoiOWYwMT... ) Did you try annotating the collection with @OptimisticLock ? ( https://hibernate.atlassian.net/browse/HHH-14043#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-14043#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100129- sha1:b514962 )

5 years, 9 months

1
0
0 / 0

[JIRA] (HHH-14043) Two concurrent element shifts in a list damage database integrity.

by Björn Zurmaar (JIRA)

Björn Zurmaar ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=5ecd86c... ) *commented* on HHH-14043 ( https://hibernate.atlassian.net/browse/HHH-14043?atlOrigin=eyJpIjoiMjAxYm... ) Re: Two concurrent element shifts in a list damage database integrity. ( https://hibernate.atlassian.net/browse/HHH-14043?atlOrigin=eyJpIjoiMjAxYm... ) The relevant declaration is: @OneToMany(cascade=CascadeType.ALL,fetch=FetchType.EAGER) @JoinColumn(referencedColumnName= "id" ,name= "foo_id" ) @OrderColumn List<Bar> bars; So this should be a unidirectional parent-owning-side-child association mapping. While the article is pretty interesting stuff I don’t see how this helps with the problem. The problem is not locking from my point of view. ( https://hibernate.atlassian.net/browse/HHH-14043#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-14043#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100129- sha1:b514962 )

5 years, 9 months

1
0
0 / 0

[JIRA] (HHH-14077) CVE-2019-14900 SQL injection issue using JPA Criteria API

by Gail Badner (JIRA)

Gail Badner ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *created* an issue Hibernate ORM ( https://hibernate.atlassian.net/browse/HHH?atlOrigin=eyJpIjoiMzg0ZWZhMGE3... ) / Bug ( https://hibernate.atlassian.net/browse/HHH-14077?atlOrigin=eyJpIjoiMzg0ZW... ) HHH-14077 ( https://hibernate.atlassian.net/browse/HHH-14077?atlOrigin=eyJpIjoiMzg0ZW... ) CVE-2019-14900 SQL injection issue using JPA Criteria API ( https://hibernate.atlassian.net/browse/HHH-14077?atlOrigin=eyJpIjoiMzg0ZW... ) Issue Type: Bug Affects Versions: 5.3.16, 5.4.17 Assignee: Gail Badner ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) Components: query-criteria Created: 18/Jun/2020 11:20 AM Fix Versions: 5.5.0.Beta1, 5.3.18, 5.4.18 Priority: Blocker Reporter: Gail Badner ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. ( https://hibernate.atlassian.net/browse/HHH-14077#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-14077#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100129- sha1:b514962 )

5 years, 9 months

1
0
0 / 0

[JIRA] (HSEARCH-3476) Make re-use of predicate/sort/fieldtype easier and safer

by Yoann Rodière (JIRA)

Yoann Rodière ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *updated* an issue Hibernate Search ( https://hibernate.atlassian.net/browse/HSEARCH?atlOrigin=eyJpIjoiOGJhZGU2... ) / Improvement ( https://hibernate.atlassian.net/browse/HSEARCH-3476?atlOrigin=eyJpIjoiOGJ... ) HSEARCH-3476 ( https://hibernate.atlassian.net/browse/HSEARCH-3476?atlOrigin=eyJpIjoiOGJ... ) Make re-use of predicate/sort/fieldtype easier and safer ( https://hibernate.atlassian.net/browse/HSEARCH-3476?atlOrigin=eyJpIjoiOGJ... ) Change By: Yoann Rodière ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) Currently, predicates/sorts /etc. can be re-used by calling {{.toPredicate()}}/{{toSort()}} /etc. on the terminal context in the DSL. The user gets a {{SearchPredicate}}/{{SearchSort}} /etc. instance that can be reused in multiple queries, even in different threads. But, there are rough edges: # {{SearchPredicate}}/{{SearchSort}} /etc. are not *actually* immutable. They internally store the builders that were used by the DSL, so if you keep a reference to the DSL contexts around, you should be able to change the builders, and thus the {{SearchPredicate}}/{{SearchSort}} /etc. Maybe we should somehow "freeze" the builders when we build the {{SearchPredicate}}/{{SearchSort}} /etc. , so that trying to call a method on the DSL after that will trigger an exception? # - When reusing a {{SearchPredicate}}/{{SearchSort}} /etc. , we do not check that the search target is compatible with the one the objects were originally created for, beyond the usual technology check (Lucene/Elasticsearch). For example if you create a {{SearchPredicate}} while targeting the index {{book}}, then you re-use it while targeting the index {{user}}, something will eventually go wrong, but we won't detect it. Maybe we should? Ideally, when a {{SearchPredicate}}/{{SearchSort}}/etc. was created with a target A, and is reused in a target B, we should make sure that B is a subset of A. If we do that, worst case, the fields referenced in the predicate/sort/etc. do not exist, but if they do we are sure they are compatible. - => This is no longer true, we do check that the same indexes are targeted. # The DSL contexts can also be reused. They shouldn't be, because they reference objects that are no longer useful once the predicate/sort/etc. is built and should be garbage-collected, but everything will work if you just store the DSL contexts somewhere and re-use them. Maybe we should prevent that somehow? This is less critical, however, since it's mostly about memory consumption. ( https://hibernate.atlassian.net/browse/HSEARCH-3476#add-comment?atlOrigin... ) Add Comment ( https://hibernate.atlassian.net/browse/HSEARCH-3476#add-comment?atlOrigin... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100129- sha1:b514962 )

5 years, 9 months

1
0
0 / 0

[JIRA] (HSEARCH-3476) Make re-use of predicate/sort/fieldtype easier and safer

by Yoann Rodière (JIRA)

5 years, 9 months

1
0
0 / 0

[JIRA] (HHH-14076) Informix Boolean legacy support

by LAdO (JIRA)

5 years, 9 months

1
0
0 / 0

[JIRA] (HHH-14076) Informix Boolean legacy support

by LAdO (JIRA)

LAdO ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *created* an issue Hibernate ORM ( https://hibernate.atlassian.net/browse/HHH?atlOrigin=eyJpIjoiZmQyNzE4MjBl... ) / Improvement ( https://hibernate.atlassian.net/browse/HHH-14076?atlOrigin=eyJpIjoiZmQyNz... ) HHH-14076 ( https://hibernate.atlassian.net/browse/HHH-14076?atlOrigin=eyJpIjoiZmQyNz... ) Informix Boolean legacy support ( https://hibernate.atlassian.net/browse/HHH-14076?atlOrigin=eyJpIjoiZmQyNz... ) Issue Type: Improvement Affects Versions: 5.2.0, 5.1.1 Assignee: Unassigned Components: hibernate-core Created: 18/Jun/2020 05:17 AM Priority: Major Reporter: LAdO ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) After changes in HHH-9894 ( https://hibernate.atlassian.net/browse/HHH-9894 ) Closed , Informix Boolean type is supported. Hibernate InformixDialect declares support for Informix version 7.3, when this data type was not supported. Guide to SQL Syntax Version 73 ( http://informixsoftware.com/ids073/Guide%20to%20SQL%20Syntax%20Version%20... ) I propose SMALLINT data type column mapping support for Informix 7.3 and legacy database schemas via a variable as in SAP HANA Driver ("hibernate.dialect.informix.use_legacy_boolean_type") ( https://hibernate.atlassian.net/browse/HHH-14076#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-14076#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100129- sha1:b514962 )

5 years, 9 months

1
0
0 / 0

[JIRA] (HSEARCH-3946) Remove the reference to SearchContext in reusable builders

by Yoann Rodière (JIRA)

5 years, 9 months

1
0
0 / 0

[JIRA] (HHH-8511) "Can't convert fromnull" when inserting clob in Informix

by LAdO (JIRA)

LAdO ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *commented* on HHH-8511 ( https://hibernate.atlassian.net/browse/HHH-8511?atlOrigin=eyJpIjoiZDkyNTN... ) Re: "Can't convert fromnull" when inserting clob in Informix ( https://hibernate.atlassian.net/browse/HHH-8511?atlOrigin=eyJpIjoiZDkyNTN... ) The same error occurred in the latest Hibernate master branch (5.5.0-SNAPSHOT) when using Informix JDBC Driver version 3.70.JC8. Caused by: java.sql.SQLException: Can't convert fromnull at com.informix.util.IfxErrMsg.getSQLMinorException(IfxErrMsg.java:547) at com.informix.jdbc.IfxObject.fromCharacterStream(IfxObject.java:706) at com.informix.jdbc.IfxValue.a(IfxValue.java:929) at com.informix.jdbc.IfxPreparedStatement.setCharacterStream(IfxPreparedStatement.java:4440) at org.hibernate.type.descriptor.sql.ClobTypeDescriptor$3$1.doBind(ClobTypeDescriptor.java:129) at org.hibernate.type.descriptor.sql.BasicBinder.bind(BasicBinder.java:73) at org.hibernate.type.AbstractStandardBasicType.nullSafeSet(AbstractStandardBasicType.java:276) at org.hibernate.type.AbstractStandardBasicType.nullSafeSet(AbstractStandardBasicType.java:271) at org.hibernate.type.AbstractSingleColumnStandardBasicType.nullSafeSet(AbstractSingleColumnStandardBasicType.java:39) at org.hibernate.persister.entity.AbstractEntityPersister.dehydrate(AbstractEntityPersister.java:2948) at org.hibernate.persister.entity.AbstractEntityPersister.insert(AbstractEntityPersister.java:3245) ... 34 more @Lars Blomenkamp's suggestion helped with this version @Override public boolean useInputStreamToInsertBlob () { return false ; } Conversely, when using the Informix JDBC Driver version 4.10.JC12, everything is OK. If useInputStreamToInsertBlob () returns false, the database returns incorrect data. java.lang.AssertionError: Expected: is "xxxxxxxxxx" but: was " xxxxxxxxxx" The unit test is in the attachment InformixLobStringTest.java ( https://hibernate.atlassian.net/secure/attachment/49703/49703_InformixLob... ) ( https://hibernate.atlassian.net/browse/HHH-8511#add-comment?atlOrigin=eyJ... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-8511#add-comment?atlOrigin=eyJ... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100129- sha1:b514962 )

5 years, 9 months

1
0
0 / 0

[JIRA] (HHH-8511) "Can't convert fromnull" when inserting clob in Informix

by LAdO (JIRA)

5 years, 9 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

hibernate-issues June 2020