September 2022 - hibernate-issues

[JIRA] (HHH-15482) CoercionException in criteria simple case statement

by Andrea Boriero (JIRA)

1 year, 7 months

1
0
0 / 0

[JIRA] (HHH-15497) Count query when counting polymorphic subclasses by type fails when run twice

by Andreas Asplund (JIRA)

Andreas Asplund ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *created* an issue Hibernate ORM ( https://hibernate.atlassian.net/browse/HHH?atlOrigin=eyJpIjoiNzYxMWYyN2Fl... ) / Bug ( https://hibernate.atlassian.net/browse/HHH-15497?atlOrigin=eyJpIjoiNzYxMW... ) HHH-15497 ( https://hibernate.atlassian.net/browse/HHH-15497?atlOrigin=eyJpIjoiNzYxMW... ) Count query when counting polymorphic subclasses by type fails when run twice ( https://hibernate.atlassian.net/browse/HHH-15497?atlOrigin=eyJpIjoiNzYxMW... ) Issue Type: Bug Affects Versions: 6.1.2, 6.1.3 Assignee: Unassigned Created: 10/Sep/2022 13:16 PM Priority: Major Reporter: Andreas Asplund ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) Added the following test in the file org.hibernate.orm.test.inheritance.discriminator.SingleTableInheritancePersistTest @Test public void testFetchChildrenCountTwiceFails(SessionFactoryScope scope) { scope.inTransaction( session -> { QueryImplementor<Long> query = session.createQuery("SELECT count(p) FROM Person p WHERE TYPE(p) = ?1", Long.class); query.setParameter(1, Child.class); Long personCount = query.getSingleResult(); assertThat( personCount, is( 2L ) ); query = session.createQuery("SELECT count(p) FROM Person p WHERE TYPE(p) = ?1", Long.class); query.setParameter(1, Child.class); personCount = query.getSingleResult(); assertThat( personCount, is( 2L ) ); } ); } ( https://hibernate.atlassian.net/browse/HHH-15497#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-15497#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100206- sha1:d8a7a40 )

1 year, 7 months

1
0
0 / 0

[JIRA] (HHH-15496) Code is Vulnerable to SQL Injection

by Dareen Fadul (JIRA)

Dareen Fadul ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=631b656... ) *commented* on HHH-15496 ( https://hibernate.atlassian.net/browse/HHH-15496?atlOrigin=eyJpIjoiMWUwZG... ) Re: Code is Vulnerable to SQL Injection ( https://hibernate.atlassian.net/browse/HHH-15496?atlOrigin=eyJpIjoiMWUwZG... ) I know that this is used for testing. My bad that I labeled it as a bug, I should’ve chosen improvement. I apologize for that! The problem I see in such code is the copy-and-paste developers, who could copy this code and use it thinking that hibernate developers would always perform best practices. It's an opinion that's all. Thanks for your response. ( https://hibernate.atlassian.net/browse/HHH-15496#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-15496#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100206- sha1:d8a7a40 )

1 year, 7 months

1
0
0 / 0

[JIRA] (HHH-15496) Code is Vulnerable to SQL Injection

by Gavin King (JIRA)

Gavin King ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *commented* on HHH-15496 ( https://hibernate.atlassian.net/browse/HHH-15496?atlOrigin=eyJpIjoiNGQ3OG... ) Re: Code is Vulnerable to SQL Injection ( https://hibernate.atlassian.net/browse/HHH-15496?atlOrigin=eyJpIjoiNGQ3OG... ) I mean, this seems equivalent to reporting a vulnerability in JDBC, because JDBC lets me execute arbitrary SQL. ( https://hibernate.atlassian.net/browse/HHH-15496#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-15496#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100206- sha1:d8a7a40 )

1 year, 7 months

1
0
0 / 0

[JIRA] (HHH-15496) Code is Vulnerable to SQL Injection

by Gavin King (JIRA)

Gavin King ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *commented* on HHH-15496 ( https://hibernate.atlassian.net/browse/HHH-15496?atlOrigin=eyJpIjoiN2ExYj... ) Re: Code is Vulnerable to SQL Injection ( https://hibernate.atlassian.net/browse/HHH-15496?atlOrigin=eyJpIjoiN2ExYj... ) Can we just close this? ( https://hibernate.atlassian.net/browse/HHH-15496#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-15496#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100206- sha1:d8a7a40 )

1 year, 7 months

1
0
0 / 0

[JIRA] (HHH-15496) Code is Vulnerable to SQL Injection

by Christian Beikov (JIRA)

Christian Beikov ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *commented* on HHH-15496 ( https://hibernate.atlassian.net/browse/HHH-15496?atlOrigin=eyJpIjoiODE5OD... ) Re: Code is Vulnerable to SQL Injection ( https://hibernate.atlassian.net/browse/HHH-15496?atlOrigin=eyJpIjoiODE5OD... ) You do realize that this is only used for automated testing, right? ( https://hibernate.atlassian.net/browse/HHH-15496#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-15496#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100206- sha1:d8a7a40 )

1 year, 7 months

1
0
0 / 0

[JIRA] (HHH-15496) Code is Vulnerable to SQL Injection

by Dareen Fadul (JIRA)

1 year, 7 months

1
0
0 / 0

[JIRA] (HHH-15482) CoercionException in criteria simple case statement

by Andrea Boriero (JIRA)

1 year, 7 months

1
0
0 / 0

[JIRA] (HSEARCH-4700) Configurable behavior on full queues for indexing operations

by Yoann Rodière (JIRA)

Yoann Rodière ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *created* an issue Hibernate Search ( https://hibernate.atlassian.net/browse/HSEARCH?atlOrigin=eyJpIjoiM2JmMGY3... ) / Improvement ( https://hibernate.atlassian.net/browse/HSEARCH-4700?atlOrigin=eyJpIjoiM2J... ) HSEARCH-4700 ( https://hibernate.atlassian.net/browse/HSEARCH-4700?atlOrigin=eyJpIjoiM2J... ) Configurable behavior on full queues for indexing operations ( https://hibernate.atlassian.net/browse/HSEARCH-4700?atlOrigin=eyJpIjoiM2J... ) Issue Type: Improvement Assignee: Unassigned Components: backend-elasticsearch, backend-lucene, engine, mapper-pojo-base Created: 09/Sep/2022 08:36 AM Fix Versions: 6.2-backlog Priority: Major Reporter: Yoann Rodière ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) See https://infinispan.zulipchat.com/#narrow/stream/118645-infinispan/topic/J... ( https://infinispan.zulipchat.com/#narrow/stream/118645-infinispan/topic/J... ) Essentially, users of methods such as: * org.hibernate.search.mapper.pojo.work.spi.PojoIndexingPlan#executeAndReport * org.hibernate.search.mapper.pojo.work.spi.PojoIndexer#add * org.hibernate.search.mapper.pojo.work.spi.PojoIndexer#addOrUpdate * … * org.hibernate.search.mapper.pojo.work.spi.PojoIndexer#delete(org.hibernate.search.mapper.pojo.model.spi.PojoRawTypeIdentifier<?>, java.lang.Object, org.hibernate.search.mapper.pojo.route.DocumentRoutesDescriptor, org.hibernate.search.engine.backend.work.execution.DocumentCommitStrategy, org.hibernate.search.engine.backend.work.execution.DocumentRefreshStrategy) * org.hibernate.search.mapper.pojo.work.spi.PojoScopeWorkspace#mergeSegments * … * org.hibernate.search.mapper.pojo.work.spi.PojoScopeWorkspace#refresh … need to be able to specify the behavior they want to enforce back-pressure: * Block the thread: that’s the current behavior, and it’s fine when calling these methods from blocking processes such as the mass indexer or org.hibernate.search.mapper.orm.work.impl.SearchWorkspaceImpl#mergeSegments. But it's a big no-no when calling from non-blocking processes such as Infinispan. * Fail: that’s the preferred behavior when calling these methods from non-blocking processes, e.g. in Infinispan, or in org.hibernate.search.mapper.orm.work.impl.SearchWorkspaceImpl#mergeSegmentsAsync. I think we should add a parameter to those methods to control that behavior, something like a OperationSubmitter. We would propagate that parameter all the way through to the AbstractWorkOrchestrator , which would take it into account as appropriate: submitter.submitToQueue(queue, element) , submitter.submitToExecutor(executor, task) , … We would provide two built-in implementations: BLOCK and REJECTED_EXECUTION_EXCEPTION. We would *not* allow custom implementations (at least for now); allowing things such as offloading to another thread, for example, could be very dangerous as submitting an operation sometimes needs to happen in a certain context (with certain locks held by the current thread). Also, we may need to add more methods to the OperationSubmitter interface and that would be a breaking change. We would *not* add a OperationSubmitter argument to methods that are clearly blocking. *Maybe we should also introduce a configuration property* (also SPI) so that Infinispan can set the default globally. Finally, maybe we could do the same for schema management operations: * org.hibernate.search.mapper.pojo.schema.management.spi.PojoScopeSchemaManager#createIfMissing * … * org.hibernate.search.mapper.pojo.schema.management.spi.PojoScopeSchemaManager#validate ( https://hibernate.atlassian.net/browse/HSEARCH-4700#add-comment?atlOrigin... ) Add Comment ( https://hibernate.atlassian.net/browse/HSEARCH-4700#add-comment?atlOrigin... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailN... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100206- sha1:d8a7a40 )

1 year, 7 months

1
0
0 / 0

[JIRA] (HHH-15446) Allow Dialect version to be specified separately from the dialect class name

by Christian Beikov (JIRA)

1 year, 7 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

hibernate-issues September 2022