GithubBackup/MyGoNavi
1
0
Fork 0
mirror of https://github.com/Syngnat/GoNavi.git synced 2026-08-07 23:23:52 +08:00
Code Issues Packages Projects Releases Wiki Activity

🐛 fix(sql-parser): 修复尾随注释导致事务与只读判定异常

Browse Source 
- 过滤分号后的纯注释语句并保留数据库可执行版本注释
- 前后端按数据库方言统一处理双横线、井号与块注释
- 修复事务选择、只读保护、SQL 审计及 AI 风险分析误判
- 补充流式 SQL、事务执行与方言解析回归测试
This commit is contained in:
Syngnat
2026-07-13 12:52:56 +08:00
parent 00473e7ac0
commit 1ae2b74279
21 changed files with 559 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
internal/app/sql_split_stream.go
View File

@@ -26,6 +26,15 @@ type sqlStreamSplitter struct {
closedPLSQL bool
}
func (s *sqlStreamSplitter) takeStatement() string {
stmt := strings.TrimSpace(s.cur.String())
s.cur.Reset()
if !hasExecutableSQLStatementContent("", stmt) {
return ""
}
return stmt
}
// Feed 将一个 chunk 喂入拆分器，返回在此 chunk 中完成的 SQL 语句列表。
func (s *sqlStreamSplitter) Feed(chunk []byte) []string {
var statements []string
@@ -209,11 +218,10 @@ func (s *sqlStreamSplitter) Feed(chunk []byte) []string {
s.pending = text[i:]
break
}
stmt := strings.TrimSpace(s.cur.String())
stmt := s.takeStatement()
if stmt != "" {
statements = append(statements, stmt)
}
s.cur.Reset()
s.closedPLSQL = false
i = lineEnd
continue
@@ -254,19 +262,17 @@ func (s *sqlStreamSplitter) Feed(chunk []byte) []string {
}
if s.closedPLSQL {
s.cur.WriteByte(ch)
stmt := strings.TrimSpace(s.cur.String())
stmt := s.takeStatement()
if stmt != "" {
statements = append(statements, stmt)
}
s.cur.Reset()
s.closedPLSQL = false
continue
}
stmt := strings.TrimSpace(s.cur.String())
stmt := s.takeStatement()
if stmt != "" {
statements = append(statements, stmt)
}
s.cur.Reset()
continue
}
// 全角分号
@@ -282,20 +288,18 @@ func (s *sqlStreamSplitter) Feed(chunk []byte) []string {
}
if s.closedPLSQL {
s.cur.WriteString("；")
stmt := strings.TrimSpace(s.cur.String())
stmt := s.takeStatement()
if stmt != "" {
statements = append(statements, stmt)
}
s.cur.Reset()
s.closedPLSQL = false
i += 2
continue
}
stmt := strings.TrimSpace(s.cur.String())
stmt := s.takeStatement()
if stmt != "" {
statements = append(statements, stmt)
}
s.cur.Reset()
i += 2
continue
}
@@ -312,8 +316,7 @@ func (s *sqlStreamSplitter) Flush() string {
if (s.closedPLSQL || strings.TrimSpace(s.cur.String()) == "") && sqlStreamCurrentLineWhitespaceOnly(&s.cur) {
if _, standalone, _ := scanSQLStandaloneSlashLineSuffix(s.pending, 0); standalone {
s.pending = ""
stmt := strings.TrimSpace(s.cur.String())
s.cur.Reset()
stmt := s.takeStatement()
s.closedPLSQL = false
return stmt
}
@@ -321,8 +324,7 @@ func (s *sqlStreamSplitter) Flush() string {
s.cur.WriteString(s.pending)
s.pending = ""
}
stmt := strings.TrimSpace(s.cur.String())
s.cur.Reset()
stmt := s.takeStatement()
if stmt == "/" {
return ""
}