Systems and methods for SQL value evaluation to detect evaluation flaws
Methods and apparatuses for detecting an evaluation flaw in a SQL query, the SQL query configured to access data in a database table are disclosed. The method includes creating a parse tree from the SQL query and evaluating the parse tree to ascertain whether a condition of the SQL query results in a type or value that is independent of contents of the database table. For type evaluation, if, responsive to the evaluating, the condition is found, designating the SQL query at risk for having the tautology in the SQL query. For value evaluation, if, responsive to the evaluating, the condition is found, determining whether the condition is always true or whether the condition is always false; and if, responsive to the determining, the condition is found to be always true or always false, designating the SQL query at risk for having the evaluation flaw in the SQL query.
1. A method for detecting an evaluation flaw in a SQL query, said SQL query configured to access data in a database table, comprising:
creating a parse tree from said SQL query;
evaluating said parse tree to ascertain whether a condition of said SQL query results in a value that is independent of contents of said database table, wherein said evaluating said parse tree further including storing a value of a select list element for subsequent expression evaluation;
performing said subsequent expression evaluation when said select list element is a part of a sub-query;
when, responsive to said evaluating, said condition is found, determining whether said condition is always true or whether said condition is always false;
when, responsive to said determining, said condition is found to be always true or always false, designating said SQL query at risk for having said evaluation flaw in said SQL query: and
rewriting the SQL query to avoid repeated performance of the condition.
2. The method of claim 1 , wherein said evaluating includes a bottom-up evaluation of said parse tree.
3. The method of claim 1 , wherein said condition is a result of a comparison operation.
4. The method of claim 1 , further comprising when said condition is found to be always true, designating said SQL query as having a tautology in said SQL query.
5. The method of claim 1 , further comprising, when said condition is found to be always false, designating said SQL query as having a contradiction in said SQL query.
6. The method of claim 1 , further comprising when said condition is found to be always true or always false, preventing said SQL query from executing.
7. A method for detecting an evaluation flaw in a SQL query, said SQL query configured to access data in a database table, comprising:
creating a parse tree from said SQL query;
evaluating step-wise, using a bottom-up methodology, through said parse tree to ascertain whether said SQL query includes a condition for said data access that when evaluated would result in a value is independent of contents of said database table, wherein said evaluating said parse tree further including storing a value of a select list element for subsequent expression evaluation;
performing said subsequent expression evaluation when said select list element is a part of a sub-query;
when, responsive to said evaluating, said condition is found, determining whether said condition is always true or whether said condition is always false;
when, responsive to said determining, said condition is found to be always true or always false, designating said SQL query at risk for having said evaluation flaw in said SQL query; and
rewriting the SQL query to avoid repeated performance of the condition.
8. The method of claim 7 , wherein said evaluating includes a bottom-up evaluation of said parse tree.
9. The method of claim 7 , wherein said evaluating includes employing a comparison operation.
10. The method of claim 7 , further comprising when said condition is found to be always true, designating said SQL query as having a tautology in said SQL query.
11. The method of claim 7 , further comprising when said condition is found to be always false, designating said SQL query as having a contradiction in said SQL query.
12. The method of claim 7 , further comprising when said condition is found to be always true or always false, preventing said SQL query from executing.
13. A method for detecting an evaluation flaw in a SQL query, said SQL query configured to access data in a database table, comprising:
creating a parse tree from said SQL query;
evaluating step-wise, using a bottom-up methodology, through said parse tree said parse tree, including:
evaluating a value of a unary expression object;
evaluating an expression involving at least said value of said unary expression object;
evaluating a condition for said data access, said condition employing said expression to ascertain whether said condition results in a value that is independent of contents of said database table, wherein said evaluating said parse tree further including storing a value of a select list element for subsequent expression evaluation;
performing said subsequent expression evaluation when said select list element is a part of a sub-query;
when, responsive to said evaluating said condition, said condition is found, determining whether said condition is always true or whether said condition is always false;
when, responsive to said determining, said condition is found to be always true or always false, designating said SQL query at risk for having said evaluation flaw in said SQL query; and
rewriting the SQL query to avoid repeated performance of the condition.
14. The method of claim 13 , wherein said evaluating said condition includes evaluating a comparison operation.