#1597 Sensitive information may be leaked in write of org.hsqldb.result.Result from org.hsqldb.ParserDDL

[Xiaoqin Fu]

In org.hsqldb.ParserDDL,
private StatementSchema compileRoleGrantOrRevoke(boolean grant) {
......
while (true) {
checkIsSimpleName();
roleList.add(token.tokenString);
read();

        if (token.tokenType == Tokens.COMMA) {
            read();

            continue;
        }

        break;
    }
......
}

In org.hsqldb.result.Result,
public void write(SessionInterface session, DataOutputStream dataOut,
RowOutputInterface rowOut) throws IOException {
......
parameterMetaData.write(rowOut);
......
}
The sensitive information (rowOut) may be leaked.
We may be able to add control on them.

[Xiaoqin Fu]

Should I open a PR for it?

[Fred Toussi]

Hi Xiaoqin, you need to explain how the sensitive information (in this case rowOut) may be leaked.

[Fred Toussi]

This ticket is not clear.