mssql 6.3.1 → 6.3.2

package/CHANGELOG.txt

@@ -1,3 +1,7 @@
+v6.3.2 (2021-05-13)
+-------------------
+[fix] Bump various dependencies for security fixes
+
 v6.3.1 (2021-01-01)
 -------------------
 [fix] Ensure line endings are unix style (LF)
@@ -63,6 +67,10 @@ v6.0.0 (2019-11-05)
 [change] Replaced pool library (`generic-pool`) with `tarn.js` ([#808](https://github.com/tediousjs/node-mssql/pull/808))
 [removed] Backoff try strategy for creating connections removed, `tarn.js` built-in retry strategy used instead
 
+v5.1.5 (2021-05-13)
+-------------------
+[fix] Bump various dependencies for security fixes
+
 v5.1.4 (2021-01-01)
 -------------------
 [fix] Ensure line endings are unix style (LF)

package/LICENSE.md

@@ -1,22 +1,22 @@
-MIT License
-
-Copyright (c) 2013-2018 Patrik Simek and contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
+MIT License
+
+Copyright (c) 2013-2018 Patrik Simek and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/lib/cli.js

@@ -1,113 +1,113 @@
-'use strict'
-
-const fs = require('fs')
-const path = require('path')
-const sql = require('./tedious')
-
-const exit = process.exit
-const write = text => process.stdout.write(text)
-Buffer.prototype.toJSON = () => {
-  return `0x${this.toString('hex')}`
-}
-
-// Resolve config path
-
-let cfgPath = path.resolve(process.argv[2] || process.cwd())
-if (fs.lstatSync(cfgPath).isDirectory()) {
-  cfgPath = path.resolve(cfgPath, './.mssql.json')
-}
-if (!fs.existsSync(cfgPath)) {
-  console.error('Config file not found.')
-  exit(1)
-}
-
-// Config checks & parse
-
-let config
-try {
-  config = fs.readFileSync(cfgPath)
-} catch (err) {
-  console.error(`Failed to load config file. ${err.message}`)
-  exit(1)
-}
-
-try {
-  config = JSON.parse(config)
-} catch (err) {
-  console.error(`Failed to parse config file. ${err.message}`)
-  exit(1)
-}
-
-// Read stdin
-
-const buffer = []
-
-process.stdin.setEncoding('utf8')
-process.stdin.on('readable', () => buffer.push(process.stdin.read()))
-
-process.stdin.on('end', () => {
-  const statement = buffer.join('')
-  let rst = 0
-  let index = 0
-
-  if (!statement.length) {
-    console.error('Statement is empty.')
-    exit(1)
-  }
-
-  sql.connect(config, err => {
-    if (err) {
-      console.error(err.message)
-      exit(1)
-    }
-
-    write('[')
-
-    const request = new sql.Request()
-    request.stream = true
-    request.on('recordset', () => {
-      index = 0
-      if (rst++ > 0) {
-        write('],')
-      }
-
-      return write('[')
-    })
-
-    request.on('error', err => {
-      console.error(err.message)
-      sql.close()
-      return exit(1)
-    })
-
-    request.on('row', row => {
-      if (index++ > 0) {
-        write(',')
-      }
-
-      return write(JSON.stringify(row))
-    })
-
-    request.on('done', () => {
-      if (rst > 0) {
-        write(']')
-      }
-
-      write(']\n')
-      sql.close()
-      return exit(0)
-    })
-
-    request.query(statement)
-  })
-})
-
-process.on('uncaughtException', err => {
-  if (err.code === 'EPIPE') {
-    console.error('Failed to pipe output stream.')
-  } else {
-    console.error(err.message)
-  }
-
-  exit(1)
-})
+'use strict'
+
+const fs = require('fs')
+const path = require('path')
+const sql = require('./tedious')
+
+const exit = process.exit
+const write = text => process.stdout.write(text)
+Buffer.prototype.toJSON = () => {
+  return `0x${this.toString('hex')}`
+}
+
+// Resolve config path
+
+let cfgPath = path.resolve(process.argv[2] || process.cwd())
+if (fs.lstatSync(cfgPath).isDirectory()) {
+  cfgPath = path.resolve(cfgPath, './.mssql.json')
+}
+if (!fs.existsSync(cfgPath)) {
+  console.error('Config file not found.')
+  exit(1)
+}
+
+// Config checks & parse
+
+let config
+try {
+  config = fs.readFileSync(cfgPath)
+} catch (err) {
+  console.error(`Failed to load config file. ${err.message}`)
+  exit(1)
+}
+
+try {
+  config = JSON.parse(config)
+} catch (err) {
+  console.error(`Failed to parse config file. ${err.message}`)
+  exit(1)
+}
+
+// Read stdin
+
+const buffer = []
+
+process.stdin.setEncoding('utf8')
+process.stdin.on('readable', () => buffer.push(process.stdin.read()))
+
+process.stdin.on('end', () => {
+  const statement = buffer.join('')
+  let rst = 0
+  let index = 0
+
+  if (!statement.length) {
+    console.error('Statement is empty.')
+    exit(1)
+  }
+
+  sql.connect(config, err => {
+    if (err) {
+      console.error(err.message)
+      exit(1)
+    }
+
+    write('[')
+
+    const request = new sql.Request()
+    request.stream = true
+    request.on('recordset', () => {
+      index = 0
+      if (rst++ > 0) {
+        write('],')
+      }
+
+      return write('[')
+    })
+
+    request.on('error', err => {
+      console.error(err.message)
+      sql.close()
+      return exit(1)
+    })
+
+    request.on('row', row => {
+      if (index++ > 0) {
+        write(',')
+      }
+
+      return write(JSON.stringify(row))
+    })
+
+    request.on('done', () => {
+      if (rst > 0) {
+        write(']')
+      }
+
+      write(']\n')
+      sql.close()
+      return exit(0)
+    })
+
+    request.query(statement)
+  })
+})
+
+process.on('uncaughtException', err => {
+  if (err.code === 'EPIPE') {
+    console.error('Failed to pipe output stream.')
+  } else {
+    console.error(err.message)
+  }
+
+  exit(1)
+})

package/lib/isolationlevel.js

@@ -1,9 +1,9 @@
-'use strict'
-
-module.exports = {
-  READ_UNCOMMITTED: 0x01,
-  READ_COMMITTED: 0x02,
-  REPEATABLE_READ: 0x03,
-  SERIALIZABLE: 0x04,
-  SNAPSHOT: 0x05
-}
+'use strict'
+
+module.exports = {
+  READ_UNCOMMITTED: 0x01,
+  READ_COMMITTED: 0x02,
+  REPEATABLE_READ: 0x03,
+  SERIALIZABLE: 0x04,
+  SNAPSHOT: 0x05
+}

package/package.json

@@ -21,7 +21,7 @@
     "azure",
     "node-mssql"
   ],
-  "version": "6.3.1",
+  "version": "6.3.2",
   "main": "index.js",
   "repository": "github:tediousjs/node-mssql",
   "license": "MIT",

package/test.js

@@ -1,40 +1,40 @@
-'use strict'
-const mssql = require('./')
-const { v4: uuid } = require('uuid')
-
-const [, , max] = process.argv;
-
-const sqlConfig = {
-  password: 'Upper_l0wercase',
-  database: 'di_production',
-  stream: false,
-  // driver: 'msnodesqlv8',
-  options: {
-    // trustedConnection: true,
-    trustServerCertificate: true,
-    enableArithAbort: true,
-    encrypt: true,
-    // abortTransactionOnError: false,
-  },
-  pool: {
-    max: max ? parseInt(max) : 10,
-    min: 0,
-  },
-  port: 1433,
-  user: 'sa',
-  server: 'localhost',
-};
-
-(async () => {
-  const pools = await Promise.all(Array.from(new Array(100)).map(() => {
-    return new mssql.ConnectionPool(sqlConfig).connect()
-  }))
-  setInterval(async () => {
-    const pool = pools[Math.floor(Math.random() * pools.length)]
-    const ps = new mssql.PreparedStatement(pool)
-    ps.input('tempParam', mssql.TYPES.NVarChar)
-    await ps.prepare('SELECT TOP 10 * FROM [debug] WHERE [tempData] = @tempParam')
-    await ps.execute({ tempParam: '{}' })
-    await ps.unprepare()
-  }, 100)
-})()
+'use strict'
+
+const mssql = require('./')
+const wtf = require('wtfnode');
+
+const sqlConfig = {
+  password: '&r8wrucH',
+  database: 'StockDB',
+  stream: false,
+  options: {
+    // trustServerCertificate: true,
+    enableArithAbort: true,
+    encrypt: true,
+    abortTransactionOnError: false,
+  },
+  pool: {
+    max: 1,
+    min: 0,
+  },
+  port: 1433,
+  user: 'dhensby',
+  server: '4sa.database.windows.net',
+}
+
+// Bad URI, connection timeouts, hangs process
+mssql.connect({ ...sqlConfig, port: 2345 }).catch(err => {
+  console.error(err.message);
+  console.log('reconnecting...');
+
+  // Try to connect using the right URI
+  return mssql
+    .connect(sqlConfig)
+    .then(() => console.log('connected'))
+    .then(() => mssql.close())
+    .then(() => console.log('closed'))
+    .catch(err => {
+      console.error(err.message)
+      wtf.dump()
+    });  // <-- Fails here
+});

package/test2.js

@@ -1,211 +0,0 @@
-const values = [
-  1810,
-  1729,
-  1857,
-  1777,
-  1927,
-  1936,
-  1797,
-  1719,
-  1703,
-  1758,
-  1768,
-  2008,
-  1963,
-  1925,
-  1919,
-  1911,
-  1782,
-  2001,
-  1744,
-  1738,
-  1742,
-  1799,
-  1765,
-  1819,
-  1888,
-  127,
-  1880,
-  1984,
-  1697,
-  1760,
-  1680,
-  1951,
-  1745,
-  1817,
-  1704,
-  1736,
-  1969,
-  1705,
-  1690,
-  1848,
-  1885,
-  1912,
-  1982,
-  1895,
-  1959,
-  1769,
-  1722,
-  1807,
-  1901,
-  1983,
-  1993,
-  1871,
-  1795,
-  1955,
-  1921,
-  1934,
-  1743,
-  1899,
-  1942,
-  1964,
-  1034,
-  1952,
-  1851,
-  1716,
-  1800,
-  1771,
-  1945,
-  1877,
-  1917,
-  1930,
-  1970,
-  1948,
-  1914,
-  1767,
-  1910,
-  563,
-  1121,
-  1897,
-  1946,
-  1882,
-  1739,
-  1900,
-  1714,
-  1931,
-  2000,
-  311,
-  1881,
-  1876,
-  354,
-  1965,
-  1842,
-  1979,
-  1998,
-  1960,
-  1852,
-  1847,
-  1938,
-  1369,
-  1780,
-  1698,
-  1753,
-  1746,
-  1868,
-  1752,
-  1802,
-  1892,
-  1755,
-  1818,
-  1913,
-  1706,
-  1862,
-  326,
-  1941,
-  1926,
-  1809,
-  1879,
-  1815,
-  1939,
-  1859,
-  1999,
-  1947,
-  1898,
-  1794,
-  1737,
-  1971,
-  1977,
-  1944,
-  1812,
-  1905,
-  1359,
-  1788,
-  1754,
-  1774,
-  1825,
-  1748,
-  1701,
-  1791,
-  1786,
-  1692,
-  1894,
-  1961,
-  1902,
-  1849,
-  1967,
-  1770,
-  1987,
-  1831,
-  1728,
-  1896,
-  1805,
-  1733,
-  1918,
-  1731,
-  661,
-  1776,
-  1494,
-  2005,
-  2009,
-  2004,
-  1915,
-  1695,
-  1710,
-  1804,
-  1929,
-  1725,
-  1772,
-  1933,
-  609,
-  1708,
-  1822,
-  1978,
-  1811,
-  1816,
-  1073,
-  1874,
-  1845,
-  1989,
-  1696,
-  1953,
-  1823,
-  1923,
-  1907,
-  1834,
-  1806,
-  1861,
-  1785,
-  297,
-  1968,
-  1764,
-  1932,
-  1937,
-  1826,
-  1732,
-  1962,
-  1916,
-  1756,
-  1975,
-  1775,
-  1922,
-  1773
-]
-
-values.forEach((first) => {
-  values.forEach((second) => {
-    const third = 2020 - first - second
-    if (values.includes(third)) {
-      console.log(first * second * third)
-    }
-  })
-})