Charles S Wetherell

US Patent:

7860842, Dec 28, 2010

Filed:

Mar 16, 2005

Appl. No.:

11/082280

Inventors:

Dmitri Bronnikov - Foster City CA, US
Charles Wetherell - Palo Alto CA, US

Assignee:

Oracle International Corporation - Redwood Shore CA

International Classification:

G06F 7/00

US Classification:

707690, 726 25

Abstract:

A vulnerability analysis tool is provided for identifying SQL injection threats. The tool is able to take advantage of the fact that the code for many database applications is located in modules stored within a database. The tool constructs a data flow graph based on all, or a specified subset, of the application code within the database. The tool identifies, within the data flow graph, the nodes that represent values used to construct SQL commands. Paths to those nodes are analyzed to determine whether any SQL injection threats exist.

US Patent:

8161465, Apr 17, 2012

Filed:

Jul 27, 2006

Appl. No.:

11/495850

Inventors:

Minghui Yang - Fremont CA, US
Chandrasekharan Iyer - Foster City CA, US
Charles Wetherell - Palo Alto CA, US

Assignee:

Oracle International Corporation - Redwood Shores CA

International Classification:

G06F 9/45

US Classification:

717140, 717148, 717153

Abstract:

One embodiment of the present invention provides a system that facilitates performing conditional compilation. The system operates by analyzing programming language source code prior to compilation to locate a preprocessing directive that specifies a condition to be evaluated, and also identifies source code to be conditionally included during compilation of the source code. Next, the system generates evaluation source code that evaluates the condition. The system then evaluates the condition by evaluating ordinary programming language and environmental variables within the evaluation source code. Note that the run-time variables are also available at run-time during execution of a compiled version of the original source code. Next, the system conditionally includes source code associated with a result of the evaluation and compiles the revised source code. Finally, the system records the use of any variables during condition evaluation in a persistent manner and automatically restarts the entire processing if any of the recorded variables may have been changed subsequent to the original compilation.

US Patent:

8239855, Aug 7, 2012

Filed:

Mar 27, 2008

Appl. No.:

12/056495

Inventors:

Charles Wetherell - Palo Alto CA, US
Bryn Llewellyn - San Francisco CA, US
Chandrasekharan Iyer - Foster City CA, US

Assignee:

Oracle International Corporation - Redwood Shores CA

International Classification:

G06F 9/445

US Classification:

717175, 717106

Abstract:

A system and method for automated management of a multi-component software installation. The software product comprises multiple components that can operate independently, but which may operate better (e. g. , with more or different functionality) if able to call another component (a “supplying” component). A persistent data store records the installation status of the components (e. g. , as static Boolean values). Each installed component that depends on another component (i. e. , can benefit from calling an element of the other component) is coded to compile conditionally, based on whether the supplying component is installed. If installed, the supplying component can be linked at compile time; if the supplying component is not installed, the installed component compiles and runs without the benefit of the supplying component.