Oracle | OWM_ASSERT

Oracle OWM_ASSERT_PKG Version 26ai

General Information

Library Note

Morgan's Library Page Header

The best Oracle News for FY2026

Oracle Database 26ai is now availble. If you haven't you downloaded already: Why?

Purpose Undocumented but the SYS.DBMS_ASSERT package, plus the functionality of the ASSERT_WS function give an indication that the intention may be related to preventing SQL Injection.

AUTHID DEFINER

Dependencies

DBMS_ASSERT	LTI	OWM_DYNSQL_ACCESS
DUAL	LTRIC	OWM_IEXP_PKG
LT	LTUTIL	OWM_MIG_PKG
LTADM	LT_EXPORT_PKG	OWM_MP_PKG
LTDDL	OWM_BULK_LOAD_PKG	OWM_VSCRIPT_PKG
LTDEFINER	OWM_CPKG_PKG	UD_TRIGS
LTDTRG	OWM_DDL_PKG	WM_DDL_UTIL

Documented No

First Available 12.2

Security Model Owned by WMSYS with no privileges granted

Direct access to this package is prevented by an Accessible By clause.

Source {ORACLE_HOME}/rdbms/admin/owmasrtb.plb
{ORACLE_HOME}/rdbms/admin/owmasrts.plb

Subprograms

ASSERT	ASSERT_WS_NEQ	VERIFYOVMSQL
ASSERT_WS	VERIFYCALLSTACK

ASSERT

Undocumented

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause owm_assert_pkg.assert( var IN VARCHAR2, flag IN NUMBER, verifyStack IN BOOLEAN) RETURN VARCHAR2;

SQL> sho user

      USER is "WMSYS"

      

      DECLARE

       b BOOLEAN := TRUE;

       retval VARCHAR2(2000);

      BEGIN

        retval := wmsys.owm_assert_pkg.assert('Test', -1, b);

        dbms_output.put_line(retval);

      END;

      /

      *

      PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG

ASSERT_WS

Returns the var string enclosed in single quotes whether TRUE or FALSE

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause owm_assert_pkg.assert_ws( var IN VARCHAR2, verifyStack IN BOOLEAN) RETURN VARCHAR2;

DECLARE

       b BOOLEAN := FALSE;

       retval VARCHAR2(2000);

      BEGIN

        retval := wmsys.owm_assert_pkg.assert_ws('Test This', b);

        dbms_output.put_line(retval);

      END;

      /

      *

      PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG

ASSERT_WS_NEQ

Appears to return the test string unchanged whether TRUE or FALSE

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause owm_assert_pkg.assert_ws_neq( var IN VARCHAR2, verifyStack IN BOOLEAN) RETURN VARCHAR2;

DECLARE

       b      BOOLEAN := FALSE;

       retval VARCHAR2(2000);

      BEGIN

        retval := wmsys.owm_assert_pkg.assert_ws_neq('Test This', b);

        dbms_output.put_line(retval);

      END;

      /

      *

      PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG

VERIFYCALLSTACK

Undocumented

In versions 12.2 through 18.3 this function was not protected with the ACCESSIBLE BY clause owm_assert_pkg.verifycallstack;

exec wmsys.owm_assert_pkg.verifycallstack;

           *

      PLS-00904: insufficient privilege to access object OWM_ASSERT_PKG

VERIFYOVMSQL (new 23ai)

Undocumented

Overload 1 owm_assert_pkg.verifyOVMSQL(var IN VARCHAR2) RETURN VARCHAR2;

TBD

Overload 2 owm_assert_pkg.verifyOVMSQL(var IN CLOB) RETURN CLOB;

TBD