Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1502272-3)
SAP Support Packages
(SAPKB46B62, SAPKB46C61, SAPKB62069, SAPKB64027, SAPKB70023, SAPKB70108, SAPKB70206, SAPKB71011, SAPKB71106, SAPKH31IB9, SAPKH40B89, SAPKH45B67)
Описание
The new function modules are used as the basis for various quality improvement measures in the dynamic programming area. This includes the composition of dynamic WHERE clauses, dynamic SET clauses, and program texts that should be created with INSERT REPORT or GENERATE SUBROUTINE-POOL.
The functions of the function modules RS_ESCAPE_QUOTES, RS_CHECK_VARIABLE and RS_CHECK_WHITELIST_TAB will be provided in later releases by the class CL_ABAP_DYN_PRG. As of SAP_BASIS Release 700, you must use the class CL_ABAP_DYN_PRG. For compatibility reasons, however, the function modules are also provided in Release SAP_BASIS 700 and higher.
The functions of the function modules RS_ESCAPE_QUOTES, RS_CHECK_VARIABLE and RS_CHECK_WHITELIST_TAB will be provided in later releases by the class CL_ABAP_DYN_PRG. As of SAP_BASIS Release 700, you must use the class CL_ABAP_DYN_PRG. For compatibility reasons, however, the function modules are also provided in Release SAP_BASIS 700 and higher.
Как исправить
You can implement the new function modules via Support Package or via the Note Assistant. This note contains three correction instructions:
1. for Releases 31I, 40B and 45B
2. for Releases 46B and 46C
3. for SAP_BASIS Releases 620, 640, 700, 701, 702, 710, 711, 720 and 730
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APPL SAP Application |
| Release 31I Until SAPKH31IB8 |
| Release 40B Until SAPKH40B88 |
| Release 45B Until SAPKH45B66 |
------------------------------------------------------------------------
Use transaction SE37 to create the following function modules in the function group SSEL with the listed parameters:
RS_CHECK_VARIABLE
IMPORTING
VALUE(VALUE)
EXCEPTIONS
INVALID_NAME
PARAMETER_WRONG_TYPE
RS_CHECK_WHITELIST_TAB
IMPORTING
REFERENCE(VALUE)
REFERENCE(WHITELIST) TYPE TABLE
EXCEPTIONS
NOT_IN_WHITELIST
RS_ESCAPE_QUOTES
CHANGING
REFERENCE(VALUE)
EXCEPTIONS
PARAMETER_TOO_SHORT
PARAMETER_WRONG_TYPE
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 620 Until SAPKB62054 |
| Release 640 Until SAPKB64012 |
------------------------------------------------------------------------
Use transaction SE37 to create the following function modules in the function group SSEL with the listed parameters:
RS_CHECK_VARIABLE
IMPORTING
VALUE(VALUE) TYPE CLIKE
EXCEPTIONS
INVALID_NAME
RS_CHECK_WHITELIST_TAB
IMPORTING
REFERENCE(VALUE)
REFERENCE(WHITELIST) TYPE ANY TABLE
EXCEPTIONS
NOT_IN_WHITELIST
RS_ESCAPE_QUOTES
CHANGING
REFERENCE(VALUE) TYPE CLIKE
EXCEPTIONS
PARAMETER_TOO_SHORT
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 46C Until SAPKB46C60 |
| Release 46B Until SAPKB46B61 |
------------------------------------------------------------------------
Use transaction SE37 to create the following function modules in the function group SSEL with the listed parameters:
RS_CHECK_VARIABLE
IMPORTING
REFERENCE(VALUE) TYPE ANY
EXCEPTIONS
INVALID_NAME
PARAMETER_WRONG_TYPE
RS_CHECK_WHITELIST_TAB
IMPORTING
REFERENCE(VALUE) TYPE ANY
REFERENCE(WHITELIST) TYPE ANY TABLE
EXCEPTIONS
NOT_IN_WHITELIST
RS_ESCAPE_QUOTES
CHANGING
REFERENCE(VALUE) TYPE ANY
EXCEPTIONS
PARAMETER_TOO_SHORT
PARAMETER_WRONG_TYPE
1. for Releases 31I, 40B and 45B
2. for Releases 46B and 46C
3. for SAP_BASIS Releases 620, 640, 700, 701, 702, 710, 711, 720 and 730
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APPL SAP Application |
| Release 31I Until SAPKH31IB8 |
| Release 40B Until SAPKH40B88 |
| Release 45B Until SAPKH45B66 |
------------------------------------------------------------------------
Use transaction SE37 to create the following function modules in the function group SSEL with the listed parameters:
RS_CHECK_VARIABLE
IMPORTING
VALUE(VALUE)
EXCEPTIONS
INVALID_NAME
PARAMETER_WRONG_TYPE
RS_CHECK_WHITELIST_TAB
IMPORTING
REFERENCE(VALUE)
REFERENCE(WHITELIST) TYPE TABLE
EXCEPTIONS
NOT_IN_WHITELIST
RS_ESCAPE_QUOTES
CHANGING
REFERENCE(VALUE)
EXCEPTIONS
PARAMETER_TOO_SHORT
PARAMETER_WRONG_TYPE
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 620 Until SAPKB62054 |
| Release 640 Until SAPKB64012 |
------------------------------------------------------------------------
Use transaction SE37 to create the following function modules in the function group SSEL with the listed parameters:
RS_CHECK_VARIABLE
IMPORTING
VALUE(VALUE) TYPE CLIKE
EXCEPTIONS
INVALID_NAME
RS_CHECK_WHITELIST_TAB
IMPORTING
REFERENCE(VALUE)
REFERENCE(WHITELIST) TYPE ANY TABLE
EXCEPTIONS
NOT_IN_WHITELIST
RS_ESCAPE_QUOTES
CHANGING
REFERENCE(VALUE) TYPE CLIKE
EXCEPTIONS
PARAMETER_TOO_SHORT
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 46C Until SAPKB46C60 |
| Release 46B Until SAPKB46B61 |
------------------------------------------------------------------------
Use transaction SE37 to create the following function modules in the function group SSEL with the listed parameters:
RS_CHECK_VARIABLE
IMPORTING
REFERENCE(VALUE) TYPE ANY
EXCEPTIONS
INVALID_NAME
PARAMETER_WRONG_TYPE
RS_CHECK_WHITELIST_TAB
IMPORTING
REFERENCE(VALUE) TYPE ANY
REFERENCE(WHITELIST) TYPE ANY TABLE
EXCEPTIONS
NOT_IN_WHITELIST
RS_ESCAPE_QUOTES
CHANGING
REFERENCE(VALUE) TYPE ANY
EXCEPTIONS
PARAMETER_TOO_SHORT
PARAMETER_WRONG_TYPE
Ссылки