SQLite
Artifact Content
Not logged in

Artifact 4b22f9e67c58fb8bccc631cb8ce980ef277a1251:

Ticket change [4b22f9e67c] - New ticket [78588b938a] Virtual Table Sync frees pVtab->zErrMsg without zeroing. by anonymous 2013-07-17 04:15:54.
D 2013-07-17T04:15:54.177
J foundin 3.7.17
J icomment <p>\r\nIn\sthe\s<code>src/vtab.c</code>\sand\sthe\s<code>sqlite3VtabSync</code>\sfunction,\s<code>pVtab->zErrMsg</code>\sis\sfreed\swithout\sthen\sbeing\szeroed.\s\sThis\sleads\sto\sa\sdouble-free\serror\scondition\swhen\s<code>pVtab->zErrMsg</code>\sis\slater\sexamined,\sfound\snon-zero\sand\sfreed\s(again).\r\n</p>\r\n<p>\r\nThe\ssimplest\sway\sto\sreproduce\sthe\sproblem\sis\sto\screate\sa\svirtual\stable\simplementation\sthat\simplements\s<code>xSync</code>.\s\sIn\s<code>xSync</code>,\sset\s<code>pVtab->zErrMsg</code>\sto\san\sallocated\sstring\sand\sreturn\san\serror\sresult.\s\sAt\sthe\snext\scallback\sopportunity\s(mine\swas\sin\s<code>xRollback</code>),\s<code>pVtab->zErrMsg</code>\swill\sstill\sbe\sset,\swhen\sit\sshould\sbe\szero.\r\n</p>
J login nobody
J mimetype text/html
J private_contact 0b7db2d1f0a1f832560fad9056d32af23def945a
J severity Minor
J status Open
J title Virtual\sTable\sSync\sfrees\spVtab->zErrMsg\swithout\szeroing
J type Code_Defect
K 78588b938a11f50207db20e0516e2a0a9a31314a
U 
Z 4b9f19b6e28e6f5edd6d5670516cf134