/ View Ticket
11:16 Closed ticket [56be9768]: Buffer overrun in FTS prefix queries plus 2 other changes (artifact: e4256312 user: dan)
11:13 Ticket [56be9768]: 3 changes (artifact: bf07d265 user: dan)
Allocate the correct size for the output buffer in fts3DoclistOrMerge(). Fix for [56be976859]. (check-in: 07788c0f user: dan tags: trunk)
18:48 New ticket [56be9768] Buffer overrun in FTS prefix queries. (artifact: 424c0064 user: dan)

Ticket Hash: 56be9768592940273e30278d29639f265f08df02
Title: Buffer overrun in FTS prefix queries
Status: Closed Type: Code_Defect
Severity: Severe Priority: Immediate
Subsystem: Extensions Resolution: Fixed
Last Modified: 2011-09-14 11:16:23
Version Found In:
A buffer overrun may occur in FTS when executing a prefix query if either (a) the FTS table uses order=DESC, or (b) if the FTS table contains negative rowid values.

dan added on 2011-09-14 11:13:49:
This bug was introduced by [551dbe30eab585]. The first release to contain the problem was 3.6.21.

dan added on 2011-09-14 11:16:23:
Fixed by [07788c0f7f].