Skip to content

DRILL-8554: Update Jackcess and Fix Linked Table Issue - #3080

Open
cgivre wants to merge 1 commit into
apache:masterfrom
cgivre:jackcess_update
Open

DRILL-8554: Update Jackcess and Fix Linked Table Issue#3080
cgivre wants to merge 1 commit into
apache:masterfrom
cgivre:jackcess_update

Conversation

@cgivre

@cgivre cgivre commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

DRILL-8554: Update Jackcess and Fix Linked Table Issue

Description

This PR bumps Jackcess to version 4.0.11. Additionally MS Access files with linked tables can potentially allow access to unauthorized files or malicious code. This PR adds a configuration variable to prohibit linked tables from being scanned. It defaults to false.

Documentation

An Access file can define tables that live in another database file, referenced by an absolute local path or a UNC
share embedded in the file itself. Drill refuses to follow those references by default: reading an untrusted file
would otherwise make the Drillbit open a path of the file author's choosing, as the Drillbit service account.

If you trust the files being queried and need linked tables to work, set allowLinkedDatabases to true:

Testing

Added additional unit tests to existing MS Access unit tests.

@cgivre cgivre self-assigned this Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant