diff options
| author | Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org> | 2020-07-27 00:00:00 +0000 |
|---|---|---|
| committer | Mike Gilbert <floppym@gentoo.org> | 2020-07-29 14:46:04 -0400 |
| commit | dd5e959e06f605b7caa81d8f44ae7b83f98440fb (patch) | |
| tree | 8f2c7376a30f187f795f06a3a98bcefb057ae756 /dev-db/sqlite/files/sqlite-3.32.3-backports_2.patch | |
| parent | 47ae30c1ae0a6d5c9790f348dca36afed8589714 (diff) | |
| download | gentoo-dd5e959e06f605b7caa81d8f44ae7b83f98440fb.tar.gz gentoo-dd5e959e06f605b7caa81d8f44ae7b83f98440fb.tar.bz2 gentoo-dd5e959e06f605b7caa81d8f44ae7b83f98440fb.zip | |
dev-db/sqlite: Security fixes and other fixes (3.32.3-r1).
Bug: https://bugs.gentoo.org/732604
Closes: https://bugs.gentoo.org/685874
Closes: https://bugs.gentoo.org/733092
Signed-off-by: Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org>
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
Diffstat (limited to 'dev-db/sqlite/files/sqlite-3.32.3-backports_2.patch')
| -rw-r--r-- | dev-db/sqlite/files/sqlite-3.32.3-backports_2.patch | 302 |
1 files changed, 302 insertions, 0 deletions
diff --git a/dev-db/sqlite/files/sqlite-3.32.3-backports_2.patch b/dev-db/sqlite/files/sqlite-3.32.3-backports_2.patch new file mode 100644 index 000000000000..32b6f9b1624f --- /dev/null +++ b/dev-db/sqlite/files/sqlite-3.32.3-backports_2.patch @@ -0,0 +1,302 @@ +https://sqlite.org/src/info/30735432bc33cb95 +https://sqlite.org/src/info/1bd18ca35bdbf303 +https://sqlite.org/src/info/49da8bdce17ced91 +https://sqlite.org/src/info/f25a56c26e28abd4 + +--- /ext/fts5/fts5_index.c ++++ /ext/fts5/fts5_index.c +@@ -2321,11 +2321,11 @@ + } + + search_success: +- pIter->iLeafOffset = iOff + nNew; +- if( pIter->iLeafOffset>n || nNew<1 ){ ++ if( (i64)iOff+nNew>n || nNew<1 ){ + p->rc = FTS5_CORRUPT; + return; + } ++ pIter->iLeafOffset = iOff + nNew; + pIter->iTermLeafOffset = pIter->iLeafOffset; + pIter->iTermLeafPgno = pIter->iLeafPgno; + +--- /ext/fts5/test/fts5corrupt3.test ++++ /ext/fts5/test/fts5corrupt3.test +@@ -10108,6 +10108,221 @@ + INSERT INTO t1(t1) SELECT x FROM t2; + } {1 {database disk image is malformed}} + ++#------------------------------------------------------------------------- ++reset_db ++do_test 69.0 { ++ sqlite3 db {} ++ db deserialize [decode_hexdb { ++.open --hexdb ++| size 32768 pagesize 4096 filename crash-31c462b8b665d0.db ++| page 1 offset 0 ++| 0: 53 51 4c 69 74 65 20 66 6f 72 6d 61 74 20 33 00 SQLite format 3. ++| 16: 10 00 01 01 00 40 20 20 00 00 00 00 00 00 00 08 .....@ ........ ++| 32: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ ++| 96: 00 00 00 00 0d 0f c7 00 07 0d 92 00 0f 8d 0f 36 ...............6 ++| 112: 0e cb 0e 6b 0e 0e 0d b6 0d 92 00 00 00 00 00 00 ...k............ ++| 3472: 00 00 22 08 06 17 11 11 01 31 74 61 62 6c 65 74 .........1tablet ++| 3488: 32 74 32 08 43 52 45 41 54 45 20 54 41 42 4c 45 2t2.CREATE TABLE ++| 3504: 20 74 32 28 78 29 56 07 06 17 1f 1f 01 7d 74 61 t2(x)V.......ta ++| 3520: 62 6c 65 74 31 5f 63 6f 6e 66 69 67 74 31 5f 63 blet1_configt1_c ++| 3536: 6f 6e 66 69 67 07 43 52 45 41 54 45 20 54 41 42 onfig.CREATE TAB ++| 3552: 4c 45 20 27 74 31 5f 63 6f 6e 66 69 67 27 28 6b LE 't1_config'(k ++| 3568: 20 50 52 49 4d 41 52 59 20 4b 45 59 2c 20 76 29 PRIMARY KEY, v) ++| 3584: 20 57 49 54 48 4f 55 54 20 52 4f 57 49 44 5b 06 WITHOUT ROWID[. ++| 3600: 07 17 21 21 01 81 01 74 61 62 6c 65 74 31 5f 64 ..!!...tablet1_d ++| 3616: 6f 63 73 69 7a 65 74 31 5f 64 6f 63 73 69 7a 65 ocsizet1_docsize ++| 3632: 06 43 52 45 41 54 45 20 54 41 42 4c 45 20 27 74 .CREATE TABLE 't ++| 3648: 31 5f 64 6f 63 73 69 7a 65 27 28 69 64 20 49 4e 1_docsize'(id IN ++| 3664: 54 45 47 45 52 20 50 52 49 4d 41 52 59 20 4b 45 TEGER PRIMARY KE ++| 3680: 59 2c 20 73 7a 20 42 4c 4f 42 29 5e 05 07 17 21 Y, sz BLOB)^...! ++| 3696: 21 01 81 07 74 61 62 6c 65 74 31 5f 63 6f 6e 74 !...tablet1_cont ++| 3712: 65 6e 74 74 31 5f 63 6f 6e 74 65 6e 74 05 43 52 entt1_content.CR ++| 3728: 45 41 54 45 20 54 41 42 4c 45 20 27 74 31 5f 63 EATE TABLE 't1_c ++| 3744: 6f 6e 74 65 6e 74 27 28 69 64 20 49 4e 54 45 47 ontent'(id INTEG ++| 3760: 45 52 20 50 52 49 4d 41 52 59 20 4b 45 59 2c 20 ER PRIMARY KEY, ++| 3776: 63 39 2c 20 63 31 2c 20 63 32 29 69 04 07 17 19 c9, c1, c2)i.... ++| 3792: 19 01 81 2d 74 61 62 6c 65 74 31 5f 69 64 78 74 ...-tablet1_idxt ++| 3808: 31 5f 69 64 78 04 43 52 45 41 54 45 20 54 41 42 1_idx.CREATE TAB ++| 3824: 4c 45 20 27 74 31 5f 69 64 78 27 28 73 65 67 69 LE 't1_idx'(segi ++| 3840: 64 2c 20 74 65 72 6d 2c 20 70 67 6e 6f 2c 20 50 d, term, pgno, P ++| 3856: 52 49 4d 41 52 59 20 4b 45 59 28 73 65 67 69 64 RIMARY KEY(segid ++| 3872: 2c 20 74 65 72 6d 29 29 20 57 49 54 48 4f 55 54 , term)) WITHOUT ++| 3888: 20 52 4f 57 49 44 55 03 07 17 1b 1b 01 81 01 74 ROWIDU........t ++| 3904: 61 62 6c 65 74 31 5f 64 61 74 61 74 31 5f 64 61 ablet1_datat1_da ++| 3920: 74 61 03 43 52 45 41 54 45 20 54 41 42 4c 45 20 ta.CREATE TABLE ++| 3936: 27 74 31 5f 64 61 74 61 27 28 69 64 20 49 4e 54 't1_data'(id INT ++| 3952: 45 47 45 52 20 50 52 49 4d 41 52 59 20 4b 45 59 EGER PRIMARY KEY ++| 3968: 2c 20 62 6c 6f 63 6b 20 42 4c 4f 42 29 38 02 06 , block BLOB)8.. ++| 3984: 17 11 11 08 5f 74 61 62 6c 65 74 31 74 31 43 52 ...._tablet1t1CR ++| 4000: 45 41 54 45 20 56 49 52 54 55 41 4c 20 54 41 42 EATE VIRTUAL TAB ++| 4016: 4c 45 20 74 31 20 55 53 49 4e 47 20 66 74 73 35 LE t1 USING fts5 ++| 4032: 28 61 2c 62 2c 63 29 00 00 00 00 00 00 00 00 00 (a,b,c)......... ++| page 3 offset 8192 ++| 0: 0d 00 00 00 03 0c 94 00 0f e6 0f ef 0c 94 00 00 ................ ++| 3216: 00 00 00 00 86 4a 84 80 80 80 80 01 04 00 8d 18 .....J.......... ++| 3232: 00 00 03 2b 02 30 30 01 02 06 01 02 06 01 02 06 ...+.00......... ++| 3248: 1f 02 03 01 02 03 01 02 03 01 08 32 30 31 36 30 ...........20160 ++| 3264: 36 30 39 01 02 07 01 02 07 01 02 07 01 01 34 01 609...........4. ++| 3280: 02 05 01 02 05 01 02 05 01 01 35 01 02 04 01 02 ..........5..... ++| 3296: 04 01 02 04 02 07 30 30 30 30 30 30 30 1c 02 04 ......0000000... ++| 3312: 01 02 04 01 02 04 01 06 62 69 6e 61 72 79 03 06 ........binary.. ++| 3328: 01 02 02 03 06 01 02 02 03 06 01 02 02 03 06 01 ................ ++| 3344: 02 02 03 06 00 02 02 03 06 01 02 02 03 06 01 02 ................ ++| 3360: 02 03 06 01 02 02 03 06 01 02 02 03 06 01 02 02 ................ ++| 3376: 03 06 01 02 02 03 06 01 02 02 01 08 63 6f 6d 70 ............comp ++| 3392: 69 6c 65 72 01 02 02 01 02 02 01 02 02 01 06 64 iler...........d ++| 3408: 62 73 74 61 74 07 02 03 01 02 03 01 02 03 02 04 bstat........... ++| 3424: 65 62 75 67 04 02 02 01 02 02 01 02 02 01 06 65 ebug...........e ++| 3440: 6e 61 62 6c 65 07 02 02 01 02 02 01 02 02 01 02 nable........... ++| 3456: 02 01 02 02 01 02 02 01 02 02 01 02 02 01 02 02 ................ ++| 3472: 01 02 02 01 02 02 01 02 02 01 02 02 01 02 02 01 ................ ++| 3488: 01 02 01 02 02 01 02 02 01 02 02 01 02 02 01 02 ................ ++| 3504: 02 01 02 02 02 08 78 74 65 6e 73 69 6f 6e 1f 02 ......xtension.. ++| 3520: 04 01 02 04 01 02 04 01 04 66 74 73 34 1a 02 03 .........fts4... ++| 3536: 01 02 03 01 02 03 04 01 35 0d 02 03 01 02 03 01 ........5....... ++| 3552: 02 03 01 03 67 63 63 01 aa 03 01 02 03 01 02 03 ....gcc......... ++| 3568: 02 06 65 6f 70 6f 6c 79 10 02 03 02 02 03 01 02 ..eopoly........ ++| 3584: 03 01 05 6a 73 6f 6e 31 13 02 03 01 02 03 01 02 ...json1........ ++| 3600: 03 01 04 6c 6f 61 64 1f 02 03 01 02 03 01 02 03 ...load......... ++| 3616: 01 03 6d 61 78 1c 02 02 01 02 02 01 02 02 02 05 ..max........... ++| 3632: 65 6d 6f 72 79 1c 02 03 01 02 03 01 02 03 04 04 emory........... ++| 3648: 73 79 73 35 16 02 03 01 02 03 01 02 03 01 06 6e sys5...........n ++| 3664: 6f 63 61 73 65 02 06 01 02 02 03 06 01 02 02 03 ocase........... ++| 3680: 06 01 02 02 03 06 01 02 02 03 06 01 02 02 03 06 ................ ++| 3696: 01 02 02 03 06 01 02 02 03 06 01 02 02 03 06 01 ................ ++| 3712: 02 02 03 06 01 02 02 03 06 01 02 02 03 06 01 02 ................ ++| 3728: 02 01 04 6f 6d 69 74 1f 02 02 01 02 02 01 02 01 ...omit......... ++| 3744: ff ff ff ff ff ff ff ff f0 00 00 00 00 00 01 02 ................ ++| 3760: 58 81 96 4d 01 06 01 02 02 03 06 01 02 02 03 06 X..M............ ++| 3776: 01 02 02 03 06 01 02 02 03 06 01 02 02 03 06 01 ................ ++| 3792: 02 02 03 06 01 02 02 03 06 01 02 02 03 06 01 02 ................ ++| 3808: 02 03 06 01 02 02 03 06 01 02 02 03 06 01 02 02 ................ ++| 3824: 01 0a 74 68 72 65 61 64 73 61 66 65 22 02 02 01 ..threadsafe.... ++| 3840: 02 02 01 02 02 01 04 76 74 61 62 07 02 04 01 02 .......vtab..... ++| 3856: 04 01 02 04 01 01 78 01 06 01 01 02 01 06 01 01 ......x......... ++| 3872: 02 01 06 01 1e 02 01 06 01 01 02 01 06 01 01 02 ................ ++| 3888: 01 06 01 01 02 01 06 01 01 02 01 06 01 01 02 01 ................ ++| 3904: 06 01 01 02 01 06 01 01 02 01 06 01 01 02 01 06 ................ ++| 3920: 01 01 02 01 06 01 01 02 01 06 01 01 02 01 06 01 ................ ++| 3936: 00 02 01 06 01 01 02 01 06 01 01 02 01 06 01 01 ................ ++| 3952: 02 01 06 01 01 02 01 06 01 01 02 01 06 01 01 02 ................ ++| 3968: 01 06 01 01 02 01 06 01 01 02 01 06 01 01 02 01 ................ ++| 3984: 06 01 01 02 01 06 01 01 02 01 06 01 01 02 01 06 ................ ++| 4000: 01 01 02 01 06 01 01 02 01 06 01 01 02 01 06 01 ................ ++| 4016: 01 02 01 06 01 01 02 01 06 01 01 02 01 06 01 01 ................ ++| 4032: 02 01 06 01 01 02 01 06 01 01 02 04 15 13 0c 0c ................ ++| 4048: 12 44 13 11 0f 47 13 0f 0b 0e 11 10 0f 0e 10 0f .D...G.......... ++| 4064: 44 0f 10 40 15 0f 07 01 03 00 14 24 5a 24 24 0f D..@.......$Z$$. ++| 4080: 0a 03 00 24 00 00 00 00 01 01 01 00 01 01 01 01 ...$............ ++| page 4 offset 12288 ++| 0: 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ ++| 4080: 00 00 00 00 00 00 00 00 00 00 05 04 09 0c 01 02 ................ ++| page 5 offset 16384 ++| 0: 0d 00 00 00 24 0c 0a 00 0f d8 0f af 0f 86 0f 74 ....$..........t ++| 16: 0f 61 0f 4e 0f 2f 0f 0f 0e ef 0e d7 0e be 0e a5 .a.N./.......... ++| 32: 0e 8d 0e 74 0e 5b 0e 40 0e 24 0e 08 0d ef 0d d5 ...t.[.@.$...... ++| 48: 0d bb 0d a0 0d 84 0d 68 0d 4f 0d 00 00 00 00 00 .......h.O...... ++| 3072: 00 00 00 00 00 00 00 00 00 00 18 24 05 00 25 0f ...........$..%. ++| 3088: 19 54 48 52 45 41 44 53 41 46 45 3d 30 58 42 49 .THREADSAFE=0XBI ++| 3104: 4e 41 52 59 18 23 05 00 25 0f 19 54 48 52 45 41 NARY.#..%..THREA ++| 3120: 44 53 41 46 45 3d 30 58 4e 4f 43 41 53 45 17 22 DSAFE=0XNOCASE.. ++| 3136: 05 00 25 0f 17 54 48 52 45 41 44 53 41 46 45 3d ..%..THREADSAFE= ++| 3152: 30 58 52 54 52 49 4d 1f 21 05 00 33 0f 19 4f 4d 0XRTRIM.!..3..OM ++| 3168: 49 54 20 4c 4f 41 44 20 45 58 54 45 4e 53 49 4f IT LOAD EXTENSIO ++| 3184: 4e 58 42 49 4e 41 52 59 1f 20 05 00 33 d3 19 4f NXBINARY. ..3..O ++| 3200: 4d 49 54 28 2c 4f 41 44 b2 04 55 85 44 54 e5 34 MIT(,OAD..U.DT.4 ++| 3216: 94 f4 e5 84 e4 f4 34 15 34 51 e1 f0 50 03 30 f1 ......4.4Q..P.0. ++| 3232: 74 f4 d4 95 42 04 c4 f4 14 42 04 55 85 44 54 e5 t...B....B.U.DT. ++| 3248: 34 94 f4 e5 85 25 45 24 94 d1 f1 e0 50 03 30 f1 4....%E$....P.0. ++| 3264: 94 d4 15 82 04 d4 54 d4 f5 25 93 d3 53 03 03 03 ......T..%..S... ++| 3280: 03 03 03 05 84 24 94 e4 15 25 91 f1 d0 50 03 30 .....$...%...P.0 ++| 3296: f1 94 d4 15 82 04 d4 54 d4 f5 25 93 d3 53 03 03 .......T..%..S.. ++| 3312: 03 03 03 03 05 84 e4 f4 34 15 34 51 e1 c0 50 03 ........4.4Q..P. ++| 3328: 30 f1 74 d4 15 82 04 d4 54 d4 f5 25 93 d3 53 03 0.t.....T..%..S. ++| 3344: 03 03 03 03 03 05 85 25 45 24 94 d1 81 b0 50 02 .......%E$....P. ++| 3360: 50 f1 94 54 e4 14 24 c4 52 05 25 45 24 54 55 84 P..T..$.R.%E$TU. ++| 3376: 24 94 e4 15 25 91 81 a0 50 02 50 f1 94 54 e4 14 $...%...P.P..T.. ++| 3392: 24 c4 52 05 25 45 24 54 55 84 e4 f4 34 15 34 51 $.R.%E$TU...4.4Q ++| 3408: 71 90 50 02 50 f1 74 54 e4 14 24 c4 52 05 25 45 q.P.P.tT..$.R.%E ++| 3424: 24 54 55 85 25 45 24 94 d1 a1 80 50 02 90 f1 94 $TU.%E$....P.... ++| 3440: 54 e4 14 24 c4 52 04 d4 54 d5 35 95 33 55 84 24 T..$.R..T.5.3U.$ ++| 3456: 94 e4 15 25 91 a1 70 50 02 90 f1 94 54 e4 14 24 ...%..pP....T..$ ++| 3472: c4 52 04 d4 54 d5 35 95 33 55 84 e4 f4 34 15 34 .R..T.5.3U...4.4 ++| 3488: 51 91 60 50 02 90 f1 74 54 e4 14 24 c4 52 04 d4 Q.`P...tT..$.R.. ++| 3504: 54 d5 35 95 33 55 85 25 45 24 94 d1 81 50 50 02 T.5.3U.%E$...PP. ++| 3520: 50 f1 94 54 e4 14 24 c4 52 04 a5 34 f4 e3 15 84 P..T..$.R..4.... ++| 3536: 24 94 e4 15 25 91 81 40 50 02 50 f1 94 54 e4 14 $...%..@P.P..T.. ++| 3552: 24 c4 52 04 a5 34 f4 e3 15 84 e4 f4 34 15 34 51 $.R..4......4.4Q ++| 3568: 71 30 50 02 4f f1 74 54 e4 14 24 c4 52 04 a5 34 q0P.O.tT..$.R..4 ++| 3584: f4 e3 15 85 25 45 24 94 d1 a1 20 50 02 90 f1 94 ....%E$... P.... ++| 3600: 54 e4 14 24 c4 52 04 74 54 f5 04 f4 c5 95 84 24 T..$.R.tT......$ ++| 3616: 94 e4 15 25 91 a1 10 50 02 90 f1 94 54 e4 14 24 ...%...P....T..$ ++| 3632: c4 52 04 74 54 f5 04 f4 c5 95 84 e4 f4 34 15 34 .R.tT........4.4 ++| 3648: 51 91 00 50 02 90 f1 74 54 e4 14 24 c4 51 f4 74 Q..P...tT..$.Q.t ++| 3664: 54 f5 04 f4 c5 95 85 25 45 24 94 d1 70 f0 50 02 T......%E$..p.P. ++| 3680: 30 f1 94 54 e4 14 24 c5 20 46 54 53 35 58 42 49 0..T..$. FTS5XBI ++| 3696: 4e 41 52 59 17 0e 05 00 23 0f 19 45 4e 41 42 4c NARY....#..ENABL ++| 3712: 45 20 46 54 53 35 58 4f 4f 43 41 53 45 16 0d 05 E FTS5XOOCASE... ++| 3728: 00 23 0f 17 45 4e 41 42 4c 45 20 46 54 53 35 58 .#..ENABLE FTS5X ++| 3744: 52 54 52 49 4d 17 0c 05 00 23 0f 19 45 4e 41 42 RTRIM....#..ENAB ++| 3760: 4c 45 20 46 54 53 34 58 42 49 4e 41 52 59 97 0b LE FTS4XBINARY.. ++| 3776: 05 00 23 0f 19 45 4e 41 42 4c 45 20 46 54 53 34 ..#..ENABLE FTS4 ++| 3792: 58 4e 4f 43 41 53 45 16 0a 05 00 23 0f 17 45 4e XNOCASE....#..EN ++| 3808: 41 42 4c 45 20 46 54 53 34 58 52 54 52 49 4d 1e ABLE FTS4XRTRIM. ++| 3824: 09 05 00 3e 5f 19 45 4e 41 42 4c 45 20 44 42 53 ...>_.ENABLE DBS ++| 3840: 44 41 54 20 56 54 41 42 58 42 49 4e 41 52 59 1e DAT VTABXBINARY. ++| 3856: 08 05 00 31 0f 19 45 4e 41 42 4c 45 20 44 42 53 ...1..ENABLE DBS ++| 3872: 54 41 54 20 56 54 41 42 58 4e 4f 43 4d e3 45 1d TAT VTABXNOCM.E. ++| 3888: 07 05 00 31 0f 17 45 4e 41 42 4c 45 20 44 42 53 ...1..ENABLE DBS ++| 3904: 54 41 54 20 56 54 41 42 58 52 54 52 49 4d 11 06 TAT VTABXRTRIM.. ++| 3920: 05 00 17 0f 19 44 45 42 55 47 58 42 49 4e 41 52 .....DEBUGXBINAR ++| 3936: 59 11 05 05 00 17 0f 19 44 45 42 55 47 58 4e 4f Y.......DEBUGXNO ++| 3952: 43 41 53 45 10 02 02 50 08 5f 17 44 45 42 55 47 CASE...P._.DEBUG ++| 3968: 58 52 54 52 49 4d 27 03 05 00 44 0f 19 43 4f 4d XRTRIM'...D..COM ++| 3984: 50 49 4c 45 52 3d 67 63 63 2d 35 2e 34 2e 30 20 PILER=gcc-5.4.0 ++| 4000: 32 30 31 36 30 36 30 39 58 42 49 4e 41 52 59 27 20160609XBINARY' ++| 4016: 02 05 00 43 0f 19 43 4f 4d 50 49 4c 45 52 3d 67 ...C..COMPILER=g ++| 4032: 63 63 2d 35 2e 34 2e 30 20 32 30 31 36 30 36 30 cc-5.4.0 2016060 ++| 4048: 39 58 4e 4f 43 41 53 45 26 01 05 00 43 c9 17 43 9XNOCASE&...C..C ++| 4064: 4f 4d 50 49 4c 47 02 3d 67 63 63 2d 35 2e 34 2e OMPILG.=gcc-5.4. ++| 4080: 30 20 32 30 31 36 30 36 30 39 58 52 54 52 49 4d 0 20160609XRTRIM ++| page 6 offset 20480 ++| 0: 0d 00 00 00 24 0e e0 00 0f f8 0f f0 0f e8 0f e0 ....$........... ++| 16: 0f d8 0f d0 0f c8 0f c0 0f b8 0f b0 0f a8 0f a0 ................ ++| 32: 0f 98 0f 90 0f 88 0f 80 0f 78 0f 70 0f 68 0f 60 .........x.p.h.` ++| 48: 0f 58 0f 50 0f 48 0f 40 0f 38 00 00 00 00 00 00 .X.P.H.@.8...... ++| 3808: 06 24 03 00 12 02 01 01 06 23 03 00 12 02 01 01 .$.......#...... ++| 3824: 06 22 03 00 12 02 01 01 06 21 03 00 12 03 01 01 .........!...... ++| 3840: 06 20 03 00 12 03 01 01 06 1f 03 00 12 03 01 01 . .............. ++| 3856: 06 1e 03 00 12 03 01 01 06 1d 03 00 12 03 01 01 ................ ++| 3872: 06 1c 03 00 12 03 01 01 06 1b 03 00 12 02 01 01 ................ ++| 3888: 06 1a 03 00 12 02 01 01 06 19 03 00 12 02 01 01 ................ ++| 3904: 06 18 03 00 12 02 01 01 06 17 03 00 12 02 01 01 ................ ++| 3920: 06 16 03 00 12 02 01 01 06 15 03 00 12 02 01 01 ................ ++| 3936: 06 14 03 00 12 02 01 01 06 13 03 00 12 02 01 01 ................ ++| 3952: 06 12 03 00 12 02 01 01 06 11 03 00 12 02 01 01 ................ ++| 3968: 06 10 03 00 12 02 01 01 06 1f 03 00 12 02 01 01 ................ ++| 3984: 06 0e 03 00 12 02 01 01 06 0d 03 00 12 02 01 01 ................ ++| 4000: 06 0c 03 00 12 02 01 01 06 0b 03 00 12 02 01 01 ................ ++| 4016: 06 0a 03 00 12 02 01 01 06 09 03 00 12 03 01 01 ................ ++| 4032: 06 08 03 00 12 03 01 01 06 07 03 00 12 03 01 01 ................ ++| 4048: 06 06 03 00 12 01 01 01 06 05 03 00 12 01 01 01 ................ ++| 4064: 06 04 03 00 12 01 01 01 06 03 03 00 12 06 01 01 ................ ++| 4080: 06 02 03 00 12 06 01 01 06 01 03 00 12 06 01 01 ................ ++| page 7 offset 24576 ++| 0: 0a 00 00 00 01 0f f4 00 0f f4 00 00 00 00 00 00 ................ ++| 4080: 00 00 00 00 0b 03 1b 01 76 65 72 73 69 6f 6e 04 ........version. ++| page 8 offset 28672 ++| 0: 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ ++| 4048: 00 00 00 00 00 00 11 03 02 2b 69 6e 74 65 67 72 .........+integr ++| 4064: 69 74 79 2d 63 68 65 63 6b 09 00 00 00 00 00 00 ity-check....... ++| end crash-31c462b8b665d0.db ++}]} {} ++ ++ ++do_catchsql_test 69.2 { ++ SELECT * FROM t1 WHERE a MATCH 'fx*' ++} {1 {database disk image is malformed}} + + sqlite3_fts5_may_be_corrupt 0 + finish_test +--- /src/btree.c ++++ /src/btree.c +@@ -3886,7 +3886,7 @@ + Pgno nFree = get4byte(&pBt->pPage1->aData[36]); + Pgno nFin = finalDbSize(pBt, nOrig, nFree); + +- if( nOrig<nFin ){ ++ if( nOrig<nFin || nFree>=nOrig ){ + rc = SQLITE_CORRUPT_BKPT; + }else if( nFree>0 ){ + rc = saveAllCursors(pBt, 0, 0); +@@ -8772,7 +8772,11 @@ + assert( pPage->intKey || pX->nKey>=0 ); + assert( pPage->leaf || !pPage->intKey ); + if( pPage->nFree<0 ){ +- rc = btreeComputeFreeSpace(pPage); ++ if( pCur->eState>CURSOR_INVALID ){ ++ rc = SQLITE_CORRUPT_BKPT; ++ }else{ ++ rc = btreeComputeFreeSpace(pPage); ++ } + if( rc ) return rc; + } + +--- /test/corruptL.test ++++ /test/corruptL.test +@@ -1266,5 +1266,30 @@ + do_execsql_test 15.1 { + UPDATE c1 SET c= NOT EXISTS(SELECT 1 FROM c1 ORDER BY (SELECT 1 FROM c1 ORDER BY a)) +10 WHERE d BETWEEN 4 AND 7; + } {} ++ ++#------------------------------------------------------------------------- ++reset_db ++do_execsql_test 16.0 { ++ CREATE TABLE t1(w, x, y, z, UNIQUE(w, x), UNIQUE(y, z)); ++ INSERT INTO t1 VALUES(1, 1, 1, 1); ++ ++ CREATE TABLE t1idx(x, y, i INTEGER, PRIMARY KEY(x)) WITHOUT ROWID; ++ INSERT INTO t1idx VALUES(10, NULL, 5); ++ ++ PRAGMA writable_schema = 1; ++ UPDATE sqlite_master SET rootpage = ( ++ SELECT rootpage FROM sqlite_master WHERE name='t1idx' ++ ) WHERE type = 'index'; ++} ++ ++db close ++sqlite3 db test.db ++ ++do_catchsql_test 16.1 { ++ PRAGMA writable_schema = ON; ++ INSERT INTO t1(rowid, w, x, y, z) VALUES(5, 10, 11, 10, NULL); ++} {1 {database disk image is malformed}} ++ + finish_test + ++ |