[jira] [Updated] (DERBY-6821) Include XMLOptimizerTraceTest in XMLSuite

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6821?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6821: --- Attachment: moveTest.diff It seems straightforward to move the XMLOptimizerTraceTest class

[jira] [Updated] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6807: --- Attachment: releaseNote.html XXE attack possible by using XmlVTI and the XML datatype

[jira] [Resolved] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6783. Resolution: Fixed Fix Version/s: 10.12.0.0 I believe we've completed all of our

[jira] [Updated] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6801: --- Attachment: unsealDerbyNetJar.diff My test failures involved running with jars, and it turns

[jira] [Resolved] (DERBY-6821) Include XMLOptimizerTraceTest in XMLSuite

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6821?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6821. Resolution: Fixed Fix Version/s: 10.12.0.0 I've completed the work I intended for

[jira] [Updated] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6807: --- Issue fix info: Patch Available,Release Note Needed (was: Patch Available) XXE attack

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14632515#comment-14632515 ] Bryan Pendleton commented on DERBY-6807: I think all that remains for this issue

[jira] [Resolved] (DERBY-6810) Add regression tests for XXE vulnerability

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6810. Resolution: Fixed We haven't thought of any additional tests to include, and the existing

[jira] [Resolved] (DERBY-6800) Implement DerbySQLIntegrityConstraintViolationException class

2015-07-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6800. Resolution: Fixed Fix Version/s: 10.12.0.0 I believe we've completed the work we

[jira] [Updated] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-07-16 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6801: --- Attachment: MessageUtilsBryan.diff Hi Abhinav, thank you for posting your patch. Once I

[jira] [Commented] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-07-16 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14630668#comment-14630668 ] Bryan Pendleton commented on DERBY-6801: The network tests do NOT run cleanly with

[jira] [Commented] (DERBY-6741) User code can get the ContextManager from an EmbedConnection

2015-07-14 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6741?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14627498#comment-14627498 ] Bryan Pendleton commented on DERBY-6741: Indeed, that makes the test reliable for

[jira] [Updated] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-07-13 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6807: --- Attachment: sqlxmlutil.diff Attached sqlxmlutil.diff is a proposed fix for this issue for

[jira] [Updated] (DERBY-6741) User code can get the ContextManager from an EmbedConnection

2015-07-13 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6741: --- Attachment: derby.log error-stacktrace.out I saw another failure in my test

[jira] [Commented] (DERBY-6741) User code can get the ContextManager from an EmbedConnection

2015-07-13 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6741?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14625693#comment-14625693 ] Bryan Pendleton commented on DERBY-6741: Perhaps: public void

[jira] [Comment Edited] (DERBY-6741) User code can get the ContextManager from an EmbedConnection

2015-07-13 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6741?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14625693#comment-14625693 ] Bryan Pendleton edited comment on DERBY-6741 at 7/14/15 2:13 AM:

[jira] [Commented] (DERBY-6741) User code can get the ContextManager from an EmbedConnection

2015-07-12 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6741?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14624127#comment-14624127 ] Bryan Pendleton commented on DERBY-6741: Thanks Rick. If I can provoke it again,

[jira] [Updated] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-07-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6807: --- Issue fix info: Patch Available XXE attack possible by using XmlVTI and the XML datatype

[jira] [Commented] (DERBY-6824) Move ShutdownException into shared code area

2015-07-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6824?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14623473#comment-14623473 ] Bryan Pendleton commented on DERBY-6824: My further testing has revealed no

[jira] [Commented] (DERBY-6741) User code can get the ContextManager from an EmbedConnection

2015-07-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6741?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14623467#comment-14623467 ] Bryan Pendleton commented on DERBY-6741: With OpenJDK 1.8.0_45 running on

[jira] [Commented] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-07-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14623474#comment-14623474 ] Bryan Pendleton commented on DERBY-6801: Hi Abhinav, Now that DERBY-6824 is in

[jira] [Updated] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-07-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6807: --- Attachment: secureXmlVTI.diff Attached secureXmlVTI.diff is my proposed change to make the

[jira] [Resolved] (DERBY-6824) Move ShutdownException into shared code area

2015-07-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6824?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6824. Resolution: Fixed Assignee: Bryan Pendleton Fix Version/s: 10.12.0.0 Move

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-07-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14623476#comment-14623476 ] Bryan Pendleton commented on DERBY-6807: Is XmlVTI documented anywhere in our

[jira] [Commented] (DERBY-6826) SOA PROD - The state of datasource DifJavaDbDataSource, application domain-level is Suspended.

2015-07-08 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6826?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14619694#comment-14619694 ] Bryan Pendleton commented on DERBY-6826: In your derby.log is this exception:

[jira] [Commented] (DERBY-6825) Add basic JSON support to Derby.

2015-07-08 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6825?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14619699#comment-14619699 ] Bryan Pendleton commented on DERBY-6825: They both sound like interesting bits of

[jira] [Commented] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-07-05 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14614373#comment-14614373 ] Bryan Pendleton commented on DERBY-6801: I filed DERBY-6824 to track the idea that

[jira] [Updated] (DERBY-6824) Move ShutdownException into shared code area

2015-07-05 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6824?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6824: --- Attachment: refactor.diff Attached 'refactor.diff' is the proposed modification to the

[jira] [Created] (DERBY-6824) Move ShutdownException into shared code area

2015-07-05 Thread Bryan Pendleton (JIRA)
Bryan Pendleton created DERBY-6824: -- Summary: Move ShutdownException into shared code area Key: DERBY-6824 URL: https://issues.apache.org/jira/browse/DERBY-6824 Project: Derby Issue Type:

[jira] [Created] (DERBY-6823) Refactor uses of DB2_JCC_MAX_EXCEPTION_PARAM_LENGTH

2015-07-04 Thread Bryan Pendleton (JIRA)
Bryan Pendleton created DERBY-6823: -- Summary: Refactor uses of DB2_JCC_MAX_EXCEPTION_PARAM_LENGTH Key: DERBY-6823 URL: https://issues.apache.org/jira/browse/DERBY-6823 Project: Derby Issue

[jira] [Commented] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-07-04 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14613967#comment-14613967 ] Bryan Pendleton commented on DERBY-6801: The MessageUtils_2.diff patch compiles on

[jira] [Commented] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-07-03 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14613526#comment-14613526 ] Bryan Pendleton commented on DERBY-6801: Yes, that part of our process is a bit

[jira] [Updated] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-07-02 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6801: --- Attachment: build.out Hi Abhinav, thanks for the latest patch. The code looks much cleaner

[jira] [Updated] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-30 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6810: --- Attachment: vtiTests2.diff vtiTests2.diff seems to pass on the platforms I have access to,

[jira] [Commented] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-06-30 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14609417#comment-14609417 ] Bryan Pendleton commented on DERBY-6801: I see what you mean; this is a little bit

[jira] [Created] (DERBY-6821) Include XMLOptimizerTraceTest in XMLSuite

2015-06-29 Thread Bryan Pendleton (JIRA)
Bryan Pendleton created DERBY-6821: -- Summary: Include XMLOptimizerTraceTest in XMLSuite Key: DERBY-6821 URL: https://issues.apache.org/jira/browse/DERBY-6821 Project: Derby Issue Type:

[jira] [Resolved] (DERBY-6820) Improve error handling in XmlVTI

2015-06-29 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6820?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6820. Resolution: Fixed Fix Version/s: 10.12.0.0 Committed revision 1688297. Improve

[jira] [Created] (DERBY-6820) Improve error handling in XmlVTI

2015-06-28 Thread Bryan Pendleton (JIRA)
Bryan Pendleton created DERBY-6820: -- Summary: Improve error handling in XmlVTI Key: DERBY-6820 URL: https://issues.apache.org/jira/browse/DERBY-6820 Project: Derby Issue Type: Sub-task

[jira] [Updated] (DERBY-6820) Improve error handling in XmlVTI

2015-06-28 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6820?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6820: --- Attachment: errorHandling.diff errorHandling.diff contains the proposed error handling

[jira] [Commented] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-06-28 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14604893#comment-14604893 ] Bryan Pendleton commented on DERBY-6783: This patch seems to be working well for

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-06-28 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14604930#comment-14604930 ] Bryan Pendleton commented on DERBY-6807: While continuing to research this issue I

[jira] [Updated] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-27 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6810: --- Attachment: vtiTests.diff Attached vtiTests.diff contains XmlVTI variants on the file access

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-06-27 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14604330#comment-14604330 ] Bryan Pendleton commented on DERBY-6807: I propose to do the following to resolve

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-06-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14599453#comment-14599453 ] Bryan Pendleton commented on DERBY-6807: I believe that using a

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14600651#comment-14600651 ] Bryan Pendleton commented on DERBY-6810: An example of how to exercise XmlVTI can

[jira] [Commented] (DERBY-2245) DatabaseMetaData.getSQLKeywords() contains words that are not keywords in Derby.

2015-06-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-2245?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14600636#comment-14600636 ] Bryan Pendleton commented on DERBY-2245: Those 5 keywords are all part of the

[jira] [Issue Comment Deleted] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6810: --- Comment: was deleted (was: An example of how to exercise XmlVTI can be found in

[jira] [Commented] (DERBY-2245) DatabaseMetaData.getSQLKeywords() contains words that are not keywords in Derby.

2015-06-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-2245?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14599708#comment-14599708 ] Bryan Pendleton commented on DERBY-2245: Can you be as specific as possible? Which

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14600650#comment-14600650 ] Bryan Pendleton commented on DERBY-6810: An example of how to exercise XmlVTI can

[jira] [Commented] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-06-23 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14597992#comment-14597992 ] Bryan Pendleton commented on DERBY-6783: Yes, this particular test is exercising

[jira] [Updated] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-06-21 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6783: --- Attachment: error-stacktrace.out With the latest patch I get an error in

[jira] [Updated] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-21 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6810: --- Attachment: error-stacktrace.out Attached is the error I get when running XMLXXETest on

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-21 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14595189#comment-14595189 ] Bryan Pendleton commented on DERBY-6810: It seems that, if I remove the +

[jira] [Updated] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-06-21 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6783: --- Attachment: cleanedUpDiff.patch I realize that I suggested on the derby-dev list that we take

[jira] [Updated] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-06-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6783: --- Attachment: 6783_moreTests_bryan.diff Slightly-tweaked copy of 6783_moreTests.diff; see the

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14592904#comment-14592904 ] Bryan Pendleton commented on DERBY-6810: It looks like the XMLXXETest test suite

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-17 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14590877#comment-14590877 ] Bryan Pendleton commented on DERBY-6810: I tried several experimental changes to

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-17 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14590905#comment-14590905 ] Bryan Pendleton commented on DERBY-6810: Oh! In number (3) above, I had a

[jira] [Updated] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-06-17 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6807: --- Attachment: externalGeneralEntities.diff I ran a set of tests (tests.lang._Suite) with

[jira] [Reopened] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-17 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton reopened DERBY-6810: After further study, I realize that the new tests in XMLXXETest exercise the built-in Derby XML

[jira] [Resolved] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-13 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6810. Resolution: Fixed I believe we've added the regression tests we planned to add. If more

[jira] [Commented] (DERBY-6818) java.lang.OutOfMemoryError

2015-06-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6818?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14581990#comment-14581990 ] Bryan Pendleton commented on DERBY-6818: For this particular query, what if you

[jira] [Commented] (DERBY-6818) java.lang.OutOfMemoryError

2015-06-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6818?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14581947#comment-14581947 ] Bryan Pendleton commented on DERBY-6818: Thanks for the additional data. If ID is

[jira] [Comment Edited] (DERBY-6818) java.lang.OutOfMemoryError

2015-06-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6818?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14581947#comment-14581947 ] Bryan Pendleton edited comment on DERBY-6818 at 6/11/15 2:03 PM:

[jira] [Updated] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-06-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6783: --- Attachment: 6783_newTest_bryan.diff Hi Abhinav, I spent some time today studying your latest

[jira] [Resolved] (DERBY-6817) Cannot stop Query

2015-06-10 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6817?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6817. Resolution: Duplicate Duplicate of DERBY-3908 Cannot stop Query -

[jira] [Commented] (DERBY-6818) java.lang.OutOfMemoryError

2015-06-10 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6818?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14580563#comment-14580563 ] Bryan Pendleton commented on DERBY-6818: To clarify: It was the ALTER TABLE

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-10 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14581364#comment-14581364 ] Bryan Pendleton commented on DERBY-6810: This page, which discusses non-Java XML

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-10 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14581363#comment-14581363 ] Bryan Pendleton commented on DERBY-6810: Here is a bit of documentation about the

[jira] [Updated] (DERBY-6810) Add regression tests for XXE vulnerability

2015-06-07 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6810: --- Attachment: readPasswordFile.diff I took Abhinav's file access test from DERBY-6807 and

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-06-07 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14576345#comment-14576345 ] Bryan Pendleton commented on DERBY-6807: Abhinav, I took your test case and put it

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-06-01 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14568473#comment-14568473 ] Bryan Pendleton commented on DERBY-6807: I changed line 96 of

[jira] [Commented] (DERBY-6813) Undocumented ON DELETE SET DEFAULT is parsed, accepted, but not enforced

2015-05-31 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6813?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=1452#comment-1452 ] Bryan Pendleton commented on DERBY-6813: Often, but not always, situations like

[jira] [Updated] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-05-31 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6807: --- Attachment: error-stacktrace.out XXE attack possible by using XmlVTI and the XML datatype

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-05-31 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14566855#comment-14566855 ] Bryan Pendleton commented on DERBY-6807: The 'database not found' message in the

[jira] [Commented] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-05-29 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14565214#comment-14565214 ] Bryan Pendleton commented on DERBY-6783: Here's a workaround: If the trigger

[jira] [Commented] (DERBY-4003) Allow user-defined functions in GROUP BY expressions

2015-05-29 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-4003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14565065#comment-14565065 ] Bryan Pendleton commented on DERBY-4003: Does this help at all?

[jira] [Commented] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-05-29 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14565277#comment-14565277 ] Bryan Pendleton commented on DERBY-6783: My theory is that the root cause of this

[jira] [Commented] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-05-28 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14564136#comment-14564136 ] Bryan Pendleton commented on DERBY-6783: In

[jira] [Commented] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-05-27 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14560974#comment-14560974 ] Bryan Pendleton commented on DERBY-6801: Although this is a separate task, and we

[jira] [Updated] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-05-27 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6783: --- Attachment: diagnostics.diff Updated test case, together with print statements in the trigger

[jira] [Commented] (DERBY-6807) XXE attack possible by using XmlVTI and the XML datatype

2015-05-27 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14562088#comment-14562088 ] Bryan Pendleton commented on DERBY-6807: In DERBY-6810, I put my Billion Laughs

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-05-25 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558356#comment-14558356 ] Bryan Pendleton commented on DERBY-6810: I experimentally tried the following

[jira] [Commented] (DERBY-6810) Add regression tests for XXE vulnerability

2015-05-25 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558532#comment-14558532 ] Bryan Pendleton commented on DERBY-6810: I agree; that is how it seems to me, too.

[jira] [Created] (DERBY-6810) Add regression tests for XXE vulnerability

2015-05-24 Thread Bryan Pendleton (JIRA)
Bryan Pendleton created DERBY-6810: -- Summary: Add regression tests for XXE vulnerability Key: DERBY-6810 URL: https://issues.apache.org/jira/browse/DERBY-6810 Project: Derby Issue Type:

[jira] [Updated] (DERBY-6810) Add regression tests for XXE vulnerability

2015-05-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6810: --- Assignee: Abhinav Gupta Add regression tests for XXE vulnerability

[jira] [Commented] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-05-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14557858#comment-14557858 ] Bryan Pendleton commented on DERBY-6783: I was able to download the latest

[jira] [Updated] (DERBY-6810) Add regression tests for XXE vulnerability

2015-05-24 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6810: --- Attachment: billionLaughs.diff I tried to demonstrate the XXE Vulnerability using the

[jira] [Commented] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-05-22 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14557129#comment-14557129 ] Bryan Pendleton commented on DERBY-6783: Since your new test case is added to one

[jira] [Assigned] (DERBY-6800) Implement DerbySQLIntegrityConstraintViolationException class

2015-05-21 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton reassigned DERBY-6800: -- Assignee: Bryan Pendleton (was: Abhinav Gupta) Implement

[jira] [Updated] (DERBY-6800) Implement DerbySQLIntegrityConstraintViolationException class

2015-05-21 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6800: --- Assignee: Abhinav Gupta (was: Bryan Pendleton) Implement

[jira] [Commented] (DERBY-6801) Implement MessageUtils class so client and server can share message argument encoding/decoding

2015-05-20 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14553514#comment-14553514 ] Bryan Pendleton commented on DERBY-6801: Hi Abhinav, can you post your latest

[jira] [Commented] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-05-20 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14553518#comment-14553518 ] Bryan Pendleton commented on DERBY-6783: Abhinav, would it be easier to write a

[jira] [Commented] (DERBY-6800) Implement DerbySQLIntegrityConstraintViolationException class

2015-05-19 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6800?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14551699#comment-14551699 ] Bryan Pendleton commented on DERBY-6800: I feel like we're ready to move ahead

[jira] [Updated] (DERBY-6783) WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql script below

2015-05-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6783: --- Assignee: Abhinav Gupta WHEN clause in CREATE TRIGGER for UPDATE is not working for the sql

[jira] [Updated] (DERBY-6788) Wrong value inserted by INSERT INTO with multiple subselects

2015-05-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6788?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton updated DERBY-6788: --- Assignee: Abhinav Gupta Wrong value inserted by INSERT INTO with multiple subselects

[jira] [Commented] (DERBY-6773) Derby throws plain SQLIntegrityConstraintViolationException

2015-05-18 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6773?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14549564#comment-14549564 ] Bryan Pendleton commented on DERBY-6773: Hi Abhinav, I will look at your new code,

[jira] [Commented] (DERBY-6809) Java 1.8 feature use

2015-05-16 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6809?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14546775#comment-14546775 ] Bryan Pendleton commented on DERBY-6809: What particular features of Java 8 do you

[jira] [Resolved] (DERBY-6808) Syntax error in DOAP file release section

2015-05-11 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6808?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bryan Pendleton resolved DERBY-6808. Resolution: Fixed Fix Version/s: 10.11.1.1 Assignee: Bryan Pendleton I

[jira] [Commented] (DERBY-6808) Syntax error in DOAP file release section

2015-05-10 Thread Bryan Pendleton (JIRA)
[ https://issues.apache.org/jira/browse/DERBY-6808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14537238#comment-14537238 ] Bryan Pendleton commented on DERBY-6808: Thanks Rick! I've updated the file and

<    4   5   6   7   8   9   10   11   12   13   >