10. EPMO Open Source Coordination Office Redaction File Detail Report

Produced by Araxis Merge on 11/9/2017 10:44:34 AM Eastern Standard Time. See www.araxis.com for information about Merge. This report uses XHTML and CSS2, and is best viewed with a modern standards-compliant browser. For optimum results when printing this report, use landscape orientation and enable printing of background images and colours in your browser.

10.1 Files compared

#	Location	File	Last Modified
1	REFDOC-v2.1.0.zip\NVCC\Documentation	FortifyParseBug.html	Thu Oct 19 17:36:40 2017 UTC
2	REFDOC-v2.1.0.zip\NVCC\Documentation	FortifyParseBug.html	Wed Nov 8 21:09:34 2017 UTC

10.2 Comparison summary

Description	Between Files 1 and 2
Description	Text Blocks	Lines
Unchanged	2	192
Changed	1	14
Inserted	0	0
Removed	0	0

10.3 Comparison options

Whitespace
Character case	Differences in character case are significant
Line endings	Differences in line endings (`CR` and `LF` characters) are ignored
CR/LF characters	Not shown in the comparison detail

10.4 Active regular expressions

No regular expressions were active.

10.5 Comparison detail

	1	<!DOCTYPE html>
	2	<html>
	3	<head>
	4	<title >Parse Err ors Which Are Bugs</ title>
	5	</head>
	6	<body>
	7
	8	<h1 id ="parse-er rors-which -are-bugs" >Parse Err ors Which Are Bugs</ h1>
	9	<p>The sca n has the following parse erro rs</p>
	10	<pre><code >[10002] U nable to p arse T-SQL at C:\Use rs\ DNS \Source\NV CC-Fortify \INPUT\NVC C\Database \App\Table s\NVCC_Use rsV2.sql:7 :1.
	11	[10002] Un able to pa rse T-SQL at C:\User s\ DNS \Source\NV CC-Fortify \INPUT\NVC C\Database \App\Store d Procedur es\NVCC_Re build_Sens itiveDxCod esTable.sq l:46:9.
	12	[10002] Un able to pa rse T-SQL at C:\User s\ DNS \Source\NV CC-Fortify \INPUT\NVC C\Database \App\Store d Procedur es\NVCC_Re build_Sens itiveDxCod esTable.sq l:70:14.
	13	[10002] Un able to pa rse T-SQL at C:\User s\ DNS \Source\NV CC-Fortify \INPUT\NVC C\Database \App\Table s\NVCC_Use rFacilitie s.sql:10:1 .
	14	[10002] Un able to pa rse T-SQL at C:\User s\ DNS \Source\NV CC-Fortify \INPUT\NVC C\Database \App\Table s\NVCC_Sen sitiveDxBa seCodes.sq l:8:1.
	15	[10002] Un able to pa rse T-SQL at C:\User s\ DNS \Source\NV CC-Fortify \INPUT\NVC C\Database \Security\ Permission s.sql:0.
	16	[10002] Un able to pa rse T-SQL at C:\User s\ DNS \Source\NV CC-Fortify \INPUT\NVC C\Database \Security\ App.sql:8: 7.
	17	</code></p re>
	18	<h2 id="wi th-clause- in-table-c reation">< code>WITH< /code> Cla use in Tab le Creatio n</h2>
	19	<p>The par ser does n ot recogni ze the <co de>WITH</c ode> claus e in a <co de>CREATE TABLE</cod e> stateme nt. This i s a valid construct for the <c ode>CREATE TABLE</co de> statem ent. See < a href="ht tps://docs .microsoft .com/en-us /sql/t-sql /statement s/create-t able-trans act-sql#n- creating-a -table-tha t-uses-row -compressi on">Micros oft's docu mentation of the CRE ATE TABLE statement< /a>, espec ially <a h ref="https ://docs.mi crosoft.co m/en-us/sq l/t-sql/st atements/c reate-tabl e-transact -sql#n-cre ating-a-ta ble-that-u ses-row-co mpression" >Example N </a> (repr oduced bel ow) which has a simi lar <code> DATA_COMPR ESSION</co de> option .</p>
	20	<pre><code class="la nguage-sql ">CREATE T ABLE dbo.T 1
	21	(c1 int, c 2 nvarchar (200) )
	22	WITH (DATA _COMPRESSI ON = ROW);
	23	</code></p re>
	24	<h3 id="fr om-databas eapptables nvcc_users v2.sql">Fr om <code>D atabase\Ap p\Tables\N VCC_UsersV 2.sql</cod e></h3>
	25	<pre><code class="la nguage-sql ">CREATE T ABLE [App] .[NVCC_Use rsV2]
	26	(
	27	[U serId] INT IDENTITY (1, 1) NOT NULL PRIM ARY KEY,
	28	[UserN ame] VARCH AR(50) NOT NULL,
	29	[CanAn nounce] BI T NOT NULL DEFAULT 0 ,
	30	[CanRe port] BIT NOT NULL D EFAULT 0
	31	) WITH (DA TA_COMPRES SION = PAG E);
	32	</code></p re>
	33	<h3 id="fr om-databas eappstored -procedure snvcc_rebu ild_sensit ivedxcodes table.sql" >From <cod e>Database \App\Store d Procedur es\NVCC_Re build_Sens itiveDxCod esTable.sq l</code></ h3>
	34	<pre><code class="la nguage-sql ">CREATE T ABLE [App] .[NVCC_Sen sitiveDxCo des](
	35	[C odingSyste m] [varch ar](12) NO T NULL,
	36	[S ta3n] [small int] NULL,
	37	[I CDSID] [int] NULL,
	38	[C ode] [varch ar](12) NO T NULL,
	39	[D iagnosisTe xt] [varch ar](255) N OT NULL,
	40	[A buseDx] [int] NULL,
	41	[S ickleDx] [int] NULL,
	42	[H IVDx] [int] NULL
	43	) ON [DefF G] WITH (D ATA_COMPRE SSION = PA GE)
	44	</code></p re>
	45	<h3 id="fr om-databas eapptables nvcc_userf acilities. sql">From <code>Data base\App\T ables\NVCC _UserFacil ities.sql< /code></h3 >
	46	<pre><code class="la nguage-sql ">CREATE T ABLE [App] .[NVCC_Use rFacilitie s]
	47	(
	48	[U serFacilit yId] INT I DENTITY (1 , 1) NOT N ULL PRIMAR Y KEY NONC LUSTERED,
	49	[UserI D] INT NOT NULL,
	50	[Sta3n ] SMALLINT NOT NULL,
	51	[Sta6a ] VARCHAR( 50) NULL,
	52	[LastA uthDateTim e] DATETIM E2(0) NULL ,
	53	[ViaB] BIT NULL,
	54	[admin ] BIT NOT NULL DEFAU LT 0
	55	) WITH (DA TA_COMPRES SION = PAG E);
	56	</code></p re>
	57	<h3 id="fr om-databas eapptables nvcc_sensi tivedxbase codes.sql" >From <cod e>Database \App\Table s\NVCC_Sen sitiveDxBa seCodes.sq l</code></ h3>
	58	<pre><code class="la nguage-sql ">CREATE T ABLE [App] .[NVCC_Sen sitiveDxBa seCodes] (
	59	[Codin gSystem] VARCHAR (1 2) NOT NU LL,
	60	[Code] VARCHAR (1 2) NOT NU LL,
	61	[Diagn osisText] VARCHAR (2 50) NOT NU LL,
	62	[Abuse Dx] INT NULL,
	63	[Sickl eDx] INT NULL,
	64	[HIVDx ] INT NULL
	65	)
	66	WITH (DATA _COMPRESSI ON = PAGE) ;
	67	</code></p re>
	68	<h2 id="mi scellaneou s-parse-er rors">Misc ellaneous Parse Erro rs</h2>
	69	<h3 id="fr om-databas eappstored -procedure snvcc_rebu ild_sensit ivedxcodes table.sql- 1">From <c ode>Databa se\App\Sto red Proced ures\NVCC_ Rebuild_Se nsitiveDxC odesTable. sql</code> </h3>
	70	<p>The sta ted parse error is:< /p>
	71	<pre><code >Parse err or at line 75, colum n 1. Enco untered: E ND
	72	</code></p re>
	73	<p>However , this is just the c lose to th e <code>BE GIN</code> at the st art of the stored pr ocedure de claration. Code pars es without error is SSMS and r uns withou t error on database. </p>
	74	<h3 id="fr om-databas esecurityp ermissions .sql">From <code>Dat abase\Secu rity\Permi ssions.sql </code></h 3>
	75	<p>The sta ted parse error is:< /p>
	76	<pre><code >Parse err or at line 1, column 1. Encou ntered: DE NY
	77	</code></p re>
	78	<p>and the entirety of that fi le is</p>
	79	<pre><code class="la nguage-sql ">DENY ALT ER
	80	ON SCH EMA::[dbo] TO [uCC_R EFDOC];
	81	</code></p re>
	82	<p>This is valid T-S QL</p>
	83	<ul>
	84	<li><a hre f="https:/ /docs.micr osoft.com/ en-us/sql/ t-sql/stat ements/den y-transact -sql">Micr osoft docu mentation of Deny</a ></li>
	85	<li><a hre f="https:/ /docs.micr osoft.com/ en-us/sql/ t-sql/stat ements/den y-schema-p ermissions -transact- sql">Micro soft docum entation o f Deny Sch ema Permis sions whic h specific ally talks about <co de>DENY AL TER</code> </a></li>
	86	</ul>
	87	<h3 id="fr om-databas esecuritya pp.sql">Fr om <code>D atabase\Se curity\App .sql</code ></h3>
	88	<p>The sta ted parse error is:< /p>
	89	<pre><code >Parse err or at line 9, column 5. Encou ntered: ON
	90	</code></p re>
	91	<p>and the relevant code is</p >
	92	<pre><code class="la nguage-sql ">GRANT UP DATE
	93	ON SCH EMA::[App] TO [uCC_R EFDOC_App] ;
	94	</code></p re>
	95	<p>This is valid T-S QL</p>
	96	<ul>
	97	<li><a hre f="https:/ /docs.micr osoft.com/ en-us/sql/ t-sql/stat ements/gra nt-transac t-sql">Mic rosoft doc umentation of Grant< /a></li>
	98	<li><a hre f="https:/ /docs.micr osoft.com/ en-us/sql/ t-sql/stat ements/gra nt-object- permission s-transact -sql">Micr osoft docu mentation of Grant O bject Perm issions wh ich specif ically tal ks about < code>GRANT UPDATE</c ode></a></ li>
	99	</ul>
	100
	101
	102	</body>
	103	</html>