Oracle OWM_ASSERT_PKG
Version 19.3

General Information
Library Note Morgan's Library Page Header
Which has the higher priority in your organization: Deploying a new database or securing the ones you already have? Looking for a website, and resources, dedicated solely to securing Oracle databases? Check out DBSecWorx.
Purpose Undocumented but the SYS.DBMS_ASSERT package, plus the functionality of the ASSERT_WS function give an indication that the intention may be related to preventing SQL Injection.
AUTHID DEFINER
Dependencies
DBMS_ASSERT LTUTIL OWM_IEXP_PKG
DUAL LT_EXPORT_PKG OWM_MIG_PKG
LT OWM_BULK_LOAD_PKG OWM_MP_PKG
LTADM OWM_CPKG_PKG OWM_VSCRIPT_PKG
LTDDL OWM_DDL_PKG UD_TRIGS
LTDTRG OWM_DYNSQL_ACCESS WM_DDL_UTIL
LTRIC    
Documented No
First Available 12.2
Security Model Owned by WMSYS with no privileges granted.
Source {ORACLE_HOME}/rdbms/admin/owmasrts.plb
Subprograms
 
ASSERT
Undocumented

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause
owm_assert_pkg.assert(
var         IN VARCHAR2,
flag        IN NUMBER,
verifyStack IN BOOLEAN)
RETURN VARCHAR2;
SQL> sho user
USER is "WMSYS"

SQL> DECLARE
  2   b BOOLEAN := TRUE;
  3   retval VARCHAR2(2000);
  4  BEGIN
  5    retval := wmsys.owm_assert_pkg.assert('Test', -1, b);
  6    dbms_output.put_line(retval);
  7  END;
  8  /
retval := wmsys.owm_assert_pkg.assert('Test', -1, b);
*
ERROR at line 5:
ORA-06550: line 5, column 13:
PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG
ORA-06550: line 5, column 3:
PL/SQL: Statement ignored
 
ASSERT_WS
Returns the var string enclosed in single quotes whether TRUE or FALSE

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause
owm_assert_pkg.assert_ws(
var         IN VARCHAR2,
verifyStack IN BOOLEAN)
RETURN VARCHAR2;
SQL> DECLARE
  2   b BOOLEAN := FALSE;
  3   retval VARCHAR2(2000);
  4  BEGIN
  5    retval := wmsys.owm_assert_pkg.assert_ws('Test This', b);
  6    dbms_output.put_line(retval);
  7  END;
  8  /
retval := wmsys.owm_assert_pkg.assert_ws('Test This', b);
*
ERROR at line 5:
ORA-06550: line 5, column 13:
PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG
ORA-06550: line 5, column 3:
PL/SQL: Statement ignored
 
ASSERT_WS_NEQ
Appears to return the test string unchanged whether TRUE or FALSE

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause
owm_assert_pkg.assert_ws_neq(
var         IN VARCHAR2,
verifyStack IN BOOLEAN)
RETURN VARCHAR2;
DECLARE
 b      BOOLEAN := FALSE;
 retval VARCHAR2(2000);
BEGIN
  retval := wmsys.owm_assert_pkg.assert_ws_neq('Test This', b);
  dbms_output.put_line(retval);
END;
/
retval := wmsys.owm_assert_pkg.assert_ws_neq('Test This', b);
*
ERROR at line 5:
ORA-06550: line 5, column 13:
PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG
ORA-06550: line 5, column 3:
PL/SQL: Statement ignored
 
NOOP
Undocumented

Overload 1

Appears to return the test string unchanged whether TRUE or FALSE

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause
owm_assert_pkg.noop(
var         IN VARCHAR2,
verifyStack IN BOOLEAN)
RETURN VARCHAR2;
DECLARE
 b      BOOLEAN := FALSE;
 retval VARCHAR2(2000);
BEGIN
  retval := wmsys.owm_assert_pkg.noop('Test This', b);
  dbms_output.put_line(retval);
END;
/
 retval := wmsys.owm_assert_pkg.noop('Test This', b);
*
ERROR at line 5:
ORA-06550: line 5, column 13:
PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG
ORA-06550: line 5, column 3:
PL/SQL: Statement ignored
Overload 2

Appears to return the test string unchanged whether TRUE or FALSE

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause
owm_assert_pkg.noop(
var         IN CLOB,
verifyStack IN BOOLEAN)
RETURN CLOB;
DECLARE
 b      BOOLEAN := TRUE;
 retval CLOB;
BEGIN
  retval := wmsys.owm_assert_pkg.noop('Test This', b);
  dbms_output.put_line(retval);
END;
/
 retval := wmsys.owm_assert_pkg.noop('Test This', b);
*
ERROR at line 5:
ORA-06550: line 5, column 13:
PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG
ORA-06550: line 5, column 3:
PL/SQL: Statement ignored
 
VERIFYCALLSTACK
Undocumented

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause
owm_assert_pkg.verifycallstack;
exec wmsys.owm_assert_pkg.verifycallstack;
BEGIN wmsys.owm_assert_pkg.verifycallstack; END;
*
ERROR at line 1:
ORA-06550: line 1, column 7:
PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG
ORA-06550: line 1, column 7:
PL/SQL: Statement ignored

/tr>
Related Topics
Built-in Functions
Built-in Packages
DBMS_ASSERT
DBMS_WM
LTAQ
LTDTRG
OWM_CPKG_PKG
OWM_DDL
OWM_IEXP_PKG
What's New In 18c
What's New In 19c

Morgan's Library Page Footer
This site is maintained by Dan Morgan. Last Updated: This site is protected by copyright and trademark laws under U.S. and International law. © 1998-2019 Daniel A. Morgan All Rights Reserved
  DBSecWorx