SQLite

View Ticket
Login
Ticket Hash: 9f2eb3abac9b83222f8a469011eb35138c47472c
Title: A lookup on a primary key or unique index with more than 4 fields can cause a crash
Status: Fixed Type: Code_Defect
Severity: Critical Priority: Immediate
Subsystem: Unknown Resolution: Fixed
Last Modified: 2013-08-29 13:12:10
Version Found In: 3.8.0
User Comments:
dan added on 2013-08-29 08:50:43:

The following query causes a buffer overflow in the NGQP module. Any query with a single table in the FROM clause that may use more than four fields of a PRIMARY KEY or UNIQUE index is similarly vulnerable.

  CREATE TABLE t1(a,b,c,d,e, PRIMARY KEY(a,b,c,d,e));
  SELECT * FROM t1 WHERE a=? AND b=? AND c=? AND d=? AND e=?;

3.8.0 is the only version with this bug. Earlier versions are Ok.