Skip to content

Ifexists#1580

Merged
katzyn merged 10 commits into
h2database:masterfrom
grandinj:ifexists
Feb 7, 2019
Merged

Ifexists#1580
katzyn merged 10 commits into
h2database:masterfrom
grandinj:ifexists

Conversation

@grandinj

Copy link
Copy Markdown
Contributor

And add an -ifNotExists option to turn on the permissive behaviour

Related to https://www.exploit-db.com/exploits/45506

even though we document that you should set this in
http://www.h2database.com/html/advanced.html#remote_access
people turn on network access but don't turn on -ifExists.

@andreitokar

Copy link
Copy Markdown
Contributor

It is nice to have that warm, fuzzy feeling that we are “secure” now! 8-)

@katzyn

katzyn commented Feb 6, 2019

Copy link
Copy Markdown
Contributor

@grandinj Do you have time to complete these changes? I can pull these changes and try to adjust test cases for them.

@katzyn

katzyn commented Feb 6, 2019

Copy link
Copy Markdown
Contributor

I guess the main problem here is the lack of -ifNotExists parameter in TestAll.beforeTest().

@grandinj

grandinj commented Feb 6, 2019

Copy link
Copy Markdown
Contributor Author

@katzyn don't have time right now. The main problem currently is plumbing -ifNotExists through for the network case, where we want to fire up a TcpServer and somehow tell it that it should create databases on demand. But maybe you have a better solution?

@katzyn
katzyn merged commit 2537856 into h2database:master Feb 7, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants