[DERBY-4208] Parameters ? with OFFSET and/or FETCH

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.5.1.1
• Fix Version/s: 10.6.1.0
• Component/s: SQL
• Issue & fix info: High Value Fix
• Bug behavior facts: Performance, Security
• Assignee: Dag H. Wanvik
• Reporter: Steve Radman
• Created: 03/May/09 12:11
• Updated: 10/May/10 23:48
• Resolved: 25/Aug/09 03:08

Description

The new OFFSET/FETCH syntax does not support Parameters.

From ij against the toursdb I would like to do the following:

ij> prepare foo as 'select * from cities offset ? rows fetch first 10 rows only';

but results in the following syntax error:

ERROR 42X01: Syntax error: Encountered "?" at line 1, column 29.

Parameterized OFFSET/FETCH is important for performance (can be prepared) and security (SQL strings not created on the fly).

Issue Links

• is duplicated by: DERBY-4541 precompile statement with result offset and fetch first clauses
• is related to: DERBY-4079 Add support for SQL:2008 <result offset clause> and <fetch first clause> to limit result set cardinality