SqlPage crash

[theonewu]

Introduction

if get parameter is null
A clear and concise description of what the bug is.
if pass the get parameter ,and the value is null. such as examname=
sqlpage will crash.

Screenshots

Expected behavior

A clear and concise description of what you expected to happen.

Version information

• OS:windows
• Database [e.g. SQLite, Postgres]oracle
• SQLPage Version [found when hovering the default footer of pages]:0.42.0

Additional context

Add any other context about the problem here.

[lovasoa]

Hello! I cannot reproduce this. Could you please provide precise step by step reproduction, as well as the logs from the time of the crash, the source of the minimal sql file that reproduces the issue, the exact database version, and the database schema and data if relevant?

[lovasoa]

the exact version of the odbc driver would also help reproducing the issue

[theonewu]

sorry, I'm late.
the sql is:

select 
    'echarts/bar'             as component,
    $examname||'stat' as title,
    '['||(listagg(''''||year||'''',',') within group (order by year asc))||']' as labels,
    '['||(listagg(''''||cou||'''',',') within group (order by year asc))||']' as cous,
    400 as height,
    to_char(sysdate,'YYYY-MM-DD HH24:MI:SS') as searchtime,
    $examid as examid,
    $examname as examname
from zkbdwh.examstat_info where examid=$examid --and instr((select ),$examid)>0--
order by year desc;

---

normal link will work.
http://10.194.104.11:81/stat/examechart.sql?examid=12&examname=abc

---

bad link will crash
http://10.194.104.11:81/stat/examechart.sql?examid=&examname=

[theonewu]

sorry, I'm late.

the sql is:
select
'echarts/bar' as component,
$examname||'stat' as title,
'['||(listagg(''''||year||'''',',') within group (order by year asc))||']' as labels,
'['||(listagg(''''||cou||'''',',') within group (order by year asc))||']' as cous,
400 as height,
to_char(sysdate,'YYYY-MM-DD HH24:MI:SS') as searchtime,
$examid as examid,
$examname as examname
from zkbdwh.examstat_info where examid=$examid --and instr((select ),$examid)>0--
order by year desc;

normal link will work.

http://10.194.104.11:81/stat/examechart.sql?examid=12&examname=abc
bad link will crash http://10.194.104.11:81/stat/examechart.sql?examid=&examname=

use echart to show chart. more morden and more functions
https://echarts.apache.org/en/index.html

[theonewu]

download the echart js package. and create a template such as bar.handlebars
<div id="mainbar" style="width: 100%;height:{{height}}px;"></div>
<script type="text/javascript" nonce="{{@csp_nonce}}" src="/static/echarts.min.js"></script>
<script type="text/javascript" nonce="{{@csp_nonce}}">
` var myChart = echarts.init(document.getElementById('mainbar'));

  var option = {
    title: {
      text: '{{{title}}}'  
    },
    tooltip: {},
    legend: {
      data: ['count']
    },
    xAxis: {
      data: {{{labels}}}
    },
    yAxis: {},
    series: [
      {
        name: 'students',
        type: 'bar',
        data: {{{cous}}}
      }
    ]
  };
  myChart.setOption(option);
</script>`

[theonewu]

I use the oracle 19C clinet and newer odbc driver. but the crash is go on

[lovasoa]

Thank you! Could you paste the SQLPage logs here? you can make the logs verbose by setting the environment variables RUST_LOG=debug

[theonewu]

SqlPage crash and lived no message in the terminal .
two normal request. the red retangle.
and then make the get parameter null. then crash.
crash url is: http://server:81/stat/examechart.sql?examid=

[theonewu]

[YunusMechery]

Try COALESCEing before passing to component.

SET examname = COALESCE($examname,'');
SET examid   = COALESCE($examid,0);

--chart component follows

[theonewu]

The problem go on.