Skip to content

Use node's SHA256 to hash routines body and add 1 minute cooldown between components check#3328

Open
sebjulliand wants to merge 2 commits into
masterfrom
fixCompSec
Open

Use node's SHA256 to hash routines body and add 1 minute cooldown between components check#3328
sebjulliand wants to merge 2 commits into
masterfrom
fixCompSec

Conversation

@sebjulliand

Copy link
Copy Markdown
Member

, ### Changes

The Db2 for i HASH_SHA256 built-in function is not available on 7.3.
Therefor, the ValidateStatement SQL function from Db2 for i isn't checked on 7.3 but can still be used, unsecurely.

This PR enhance the getSQLRoutineSignature method to fix that:

  • The method will now return the routine's external program for an external routine
  • It will return the routine's body hashed locally using node's crypto sha256 algorithm

It also adds a one minute cooldown between two component's state check to reduce the workload for some component that were checked every seconde or (like Db2 syntax checker).

NB: once this is released, Db2 extension will have to be updated and released right after with the new SHA256 hash as the result from the local hash differs from remote's.

How to test this PR

Checklist

  • have tested my change

Signed-off-by: Seb Julliand <sebjulliand@gmail.com>
Signed-off-by: Seb Julliand <sebjulliand@gmail.com>
@sebjulliand sebjulliand requested a review from a team June 24, 2026 20:14
@sebjulliand sebjulliand self-assigned this Jun 24, 2026
@sebjulliand sebjulliand added the bug A confirmed issue when something isn't working as intended label Jun 24, 2026
@sebjulliand sebjulliand temporarily deployed to testing_environment June 24, 2026 20:14 — with GitHub Actions Inactive
@github-actions

Copy link
Copy Markdown
Contributor

👋 A new build is available for this PR based on 3e12ae7.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug A confirmed issue when something isn't working as intended

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant