LucaCappelletti94 opened a new pull request, #2201:
URL: https://github.com/apache/datafusion-sqlparser-rs/pull/2201

   Parsing `SET AUTHORIZATION <value>` without a scope modifier (e.g. 
`SESSION`, `LOCAL`) causes a panic due to an `.expect()` call on a `None` value 
in `parse_set`. This was discovered via a fuzz-like input string but is 
trivially reproducible with any `SET AUTHORIZATION ...` statement that omits 
the scope keyword.
   
   The panic occurs at mod.rs:
   ```rust
   scope: scope.expect("SET ... AUTHORIZATION must have a scope"),
   ```
   
   Valid SQL requires a scope modifier, e.g. `SET SESSION AUTHORIZATION 
'user'`, so the missing scope is indeed an error — but it should be a graceful 
`ParserError`, not a panic.
   
   Closes #2200 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to