Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

src,test: disallow unsafe integer coercion in SQLite #53851

Merged

Conversation

tniessen
Copy link
Member

@tniessen tniessen commented Jul 14, 2024

Currently, by default (i.e., when use_big_ints_ has not explicitly been set to true), reading a SQLite integer value that is not a safe integer in JavaScript is likely to yield an incorrect number.

Instead, err on the side of caution and throw if the stored integer is not a safe integer in JavaScript and if use_big_ints_ has not been set to true.

Blocked on #53850.

@tniessen tniessen added blocked PRs that are blocked by other issues or PRs. sqlite Issues and PRs related to the SQLite subsystem. labels Jul 14, 2024
@tniessen tniessen requested a review from cjihrig July 14, 2024 23:26
@nodejs-github-bot nodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. needs-ci PRs that need a full CI run. labels Jul 14, 2024
@RedYetiDev
Copy link
Member

BTW nodejs/core-validate-commit#121 will fix the commit lint error

@tniessen
Copy link
Member Author

I'll have to rebase this anyway, I can change the commit message while I'm at it if nobody releases a new version of core-validate-commit before then.

@tniessen tniessen added the experimental Issues and PRs related to experimental features. label Jul 17, 2024
@tniessen tniessen force-pushed the sqlite-dont-coerce-int-silently branch from 190f061 to 2af55e1 Compare July 17, 2024 10:10
@tniessen tniessen marked this pull request as ready for review July 17, 2024 10:10
Currently, by default (i.e., when use_big_ints_ has not explicitly been
set to true), reading a SQLite integer value that is not a safe integer
in JavaScript is likely to yield an incorrect number.

Instead, err on the side of caution and throw if the stored integer is
not a safe integer in JavaScript and if use_big_ints_ has not been set
to true.
@tniessen tniessen force-pushed the sqlite-dont-coerce-int-silently branch from 2af55e1 to 1714eda Compare July 17, 2024 10:11
@tniessen tniessen added request-ci Add this label to start a Jenkins CI on a PR. and removed blocked PRs that are blocked by other issues or PRs. labels Jul 17, 2024
@tniessen tniessen changed the title sqlite: disallow unsafe integer coercion src,test: disallow unsafe integer coercion in SQLite Jul 17, 2024
@tniessen
Copy link
Member Author

#53850 has landed, so this is ready. Rebased and updated the commit message.

@github-actions github-actions bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Jul 17, 2024
@nodejs-github-bot
Copy link
Collaborator

@tniessen tniessen added author ready PRs that have at least one approval, no pending requests for changes, and a CI started. review wanted PRs that need reviews. labels Jul 17, 2024
@tniessen
Copy link
Member Author

Landing after 7 days due to lack of reviews.

@tniessen tniessen added commit-queue Add this label to land a pull request using GitHub Actions. and removed review wanted PRs that need reviews. labels Jul 22, 2024
@nodejs-github-bot nodejs-github-bot added commit-queue-failed An error occurred while landing this pull request using GitHub Actions. and removed commit-queue Add this label to land a pull request using GitHub Actions. labels Jul 22, 2024
@nodejs-github-bot
Copy link
Collaborator

Commit Queue failed
- Loading data for nodejs/node/pull/53851
✔  Done loading data for nodejs/node/pull/53851
----------------------------------- PR info ------------------------------------
Title      src,test: disallow unsafe integer coercion in SQLite (#53851)
   ⚠  Could not retrieve the email or name of the PR author's from user's GitHub profile!
Branch     tniessen:sqlite-dont-coerce-int-silently -> nodejs:main
Labels     c++, experimental, author ready, needs-ci, sqlite
Commits    1
 - src,test: disallow unsafe integer coercion in SQLite
Committers 1
 - Tobias Nießen <tniessen@tnie.de>
PR-URL: https://github.com/nodejs/node/pull/53851
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
------------------------------ Generated metadata ------------------------------
PR-URL: https://github.com/nodejs/node/pull/53851
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
--------------------------------------------------------------------------------
   ⚠  Commits were pushed since the last approving review:
   ⚠  - src,test: disallow unsafe integer coercion in SQLite
   ℹ  This PR was created on Sun, 14 Jul 2024 23:26:13 GMT
   ✔  Approvals: 1
   ✔  - Colin Ihrig (@cjihrig): https://github.com/nodejs/node/pull/53851#pullrequestreview-2176741518
   ✔  Last GitHub CI successful
   ℹ  Last Full PR CI on 2024-07-17T10:24:04Z: https://ci.nodejs.org/job/node-test-pull-request/60384/
- Querying data for job/node-test-pull-request/60384/
   ✔  Last Jenkins CI successful
--------------------------------------------------------------------------------
   ✔  Aborted `git node land` session in /home/runner/work/node/node/.ncu
https://github.com/nodejs/node/actions/runs/10040445846

@cjihrig cjihrig added commit-queue Add this label to land a pull request using GitHub Actions. and removed commit-queue-failed An error occurred while landing this pull request using GitHub Actions. labels Jul 22, 2024
@nodejs-github-bot nodejs-github-bot removed the commit-queue Add this label to land a pull request using GitHub Actions. label Jul 22, 2024
@nodejs-github-bot nodejs-github-bot merged commit ad0a2db into nodejs:main Jul 22, 2024
68 checks passed
@nodejs-github-bot
Copy link
Collaborator

Landed in ad0a2db

targos pushed a commit that referenced this pull request Jul 28, 2024
Currently, by default (i.e., when use_big_ints_ has not explicitly been
set to true), reading a SQLite integer value that is not a safe integer
in JavaScript is likely to yield an incorrect number.

Instead, err on the side of caution and throw if the stored integer is
not a safe integer in JavaScript and if use_big_ints_ has not been set
to true.

PR-URL: #53851
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
@RafaelGSS RafaelGSS mentioned this pull request Jul 30, 2024
RafaelGSS pushed a commit that referenced this pull request Aug 5, 2024
Currently, by default (i.e., when use_big_ints_ has not explicitly been
set to true), reading a SQLite integer value that is not a safe integer
in JavaScript is likely to yield an incorrect number.

Instead, err on the side of caution and throw if the stored integer is
not a safe integer in JavaScript and if use_big_ints_ has not been set
to true.

PR-URL: #53851
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
@targos targos added the dont-land-on-v20.x PRs that should not land on the v20.x-staging branch and should not be released in v20.x. label Sep 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
author ready PRs that have at least one approval, no pending requests for changes, and a CI started. c++ Issues and PRs that require attention from people who are familiar with C++. dont-land-on-v20.x PRs that should not land on the v20.x-staging branch and should not be released in v20.x. experimental Issues and PRs related to experimental features. needs-ci PRs that need a full CI run. sqlite Issues and PRs related to the SQLite subsystem.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants