/ Ticket Change Details
Login
SQLite training in Houston TX on 2019-11-05 (details)
Part of the 2019 Tcl Conference
Overview

Artifact ID: 6ec5e901a4ad26ca6376188aa500fab9c6c754aa
Ticket: 0eb70d77cb05bb227203136b38199c957bb32e63
Invalid pointer passed to the authorizer callback
User & Date: drh 2013-05-06 13:03:05
Changes

  1. Change foundin to "3.7.16.2"
  2. Change icomment to:

    The UPDATE statement in the following code reads past the end of an array and passes an invalid pointer to the authorizer callback:

    CREATE TABLE t1(a,b,c,d,e,f,g,h);
    UPDATE t1 SET rowid=rowid+100;
    

    The problem can be seen by running the script above in the sqlite3 command-line shell using valgrind. This problem has been in the code since version 2.7.6 circa 2003-01-25 and appears to have been added by check-in [45de93f913a18026a]. The problem has not been noticed before now because it is obscure and mostly harmless - unless the authorizer is used on an UPDATE statement that changes the ROWID the worst that can happen is a single read past the end of an array.

  3. Change login to "drh"
  4. Change mimetype to "text/x-fossil-wiki"
  5. Change severity to "Important"
  6. Change status to "Open"
  7. Change title to "Invalid pointer passed to the authorizer callback"
  8. Change type to "Code_Defect"