Oracle | OWM_ASSERT

Oracle OWM_ASSERT_PKG Version 26ai

General Information

Library Note

Morgan's Library Page Header

The best Oracle News for FY2026

Oracle Database 26ai will be available on generic Linux platforms in January and soon on AIX and Windows

Purpose Undocumented but the SYS.DBMS_ASSERT package, plus the functionality of the ASSERT_WS function give an indication that the intention may be related to preventing SQL Injection.

AUTHID DEFINER

Dependencies

DBMS_ASSERT	LTI	OWM_DYNSQL_ACCESS
DUAL	LTRIC	OWM_IEXP_PKG
LT	LTUTIL	OWM_MIG_PKG
LTADM	LT_EXPORT_PKG	OWM_MP_PKG
LTDDL	OWM_BULK_LOAD_PKG	OWM_VSCRIPT_PKG
LTDEFINER	OWM_CPKG_PKG	UD_TRIGS
LTDTRG	OWM_DDL_PKG	WM_DDL_UTIL

Documented No

First Available 12.2

Security Model Owned by WMSYS with no privileges granted

Direct access to this package is prevented by an Accessible By clause.

Source {ORACLE_HOME}/rdbms/admin/owmasrtb.plb
{ORACLE_HOME}/rdbms/admin/owmasrts.plb

Subprograms

ASSERT	ASSERT_WS_NEQ	VERIFYOVMSQL
ASSERT_WS	VERIFYCALLSTACK

ASSERT

Undocumented

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause owm_assert_pkg.assert( var IN VARCHAR2, flag IN NUMBER, verifyStack IN BOOLEAN) RETURN VARCHAR2;

SQL> sho user

      USER is "WMSYS"

      

      DECLARE

       b BOOLEAN := TRUE;

       retval VARCHAR2(2000);

      BEGIN

        retval := wmsys.owm_assert_pkg.assert('Test', -1, b);

        dbms_output.put_line(retval);

      END;

      /

      *

      PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG

ASSERT_WS

Returns the var string enclosed in single quotes whether TRUE or FALSE

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause owm_assert_pkg.assert_ws( var IN VARCHAR2, verifyStack IN BOOLEAN) RETURN VARCHAR2;

DECLARE

       b BOOLEAN := FALSE;

       retval VARCHAR2(2000);

      BEGIN

        retval := wmsys.owm_assert_pkg.assert_ws('Test This', b);

        dbms_output.put_line(retval);

      END;

      /

      *

      PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG

ASSERT_WS_NEQ

Appears to return the test string unchanged whether TRUE or FALSE

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause owm_assert_pkg.assert_ws_neq( var IN VARCHAR2, verifyStack IN BOOLEAN) RETURN VARCHAR2;

DECLARE

       b      BOOLEAN := FALSE;

       retval VARCHAR2(2000);

      BEGIN

        retval := wmsys.owm_assert_pkg.assert_ws_neq('Test This', b);

        dbms_output.put_line(retval);

      END;

      /

      *

      PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG

VERIFYCALLSTACK

Undocumented

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause owm_assert_pkg.verifycallstack;

exec wmsys.owm_assert_pkg.verifycallstack;

           *

      PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG

VERIFYOVMSQL (new 23ai)

Undocumented

Overload 1 owm_assert_pkg.verifyOVMSQL(var IN VARCHAR2) RETURN VARCHAR2;

TBD

Overload 2 owm_assert_pkg.verifyOVMSQL(var IN CLOB) RETURN CLOB;

TBD