PM16559: PREPARED STATEMENT PARAMETER VALUES ARE PRINTED IN EXCEPTION MESSAGES WHEN A JPA ERROR OCCURS.

APAR status

• Closed as program error.

Error description

• The JPA provider included in WebSphere Application Server
  includes the parameter values from the prepared statements in
  its exception text.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server Feature    *
  *                  Pack for OSGi Applications and JPA 2.0      *
  *                  users of Java Persistence API (JPA)         *
  *                  applications.                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: The OpenJPA JPA provider included with  *
  *                      WebSphere Application Server logs       *
  *                      SQL parameters when an exception        *
  *                      occurs.                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When a SQL exception occurs (e.g. inserting a new row) OpenJPA
  includes the SQL statement in the exception text in the log
  files. The values for any prepared statement parameters are
  included in this text by default.
  

Problem conclusion

• The OpenJPA code has been updated to no longer print the
  parameter values by default, instead they will be masked with
  a ? character.
  
  If the old behavior is desired (this can be beneficial in
  development environments) the application may enable it by
  adding the following persistence property to persistence.xml :
  <property name="openjpa.ConnectionFactoryProperties"
  value="PrintParameters=true"/>
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 1.0.0.1.  Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM14031

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JPA OSGI FEATUR

• Fixed component ID

  5724J0857

Applicable component levels

• R700 PSY

     UP