From 9ac0c79e1129219cbbdd9db08d0990fac89b06d5 Mon Sep 17 00:00:00 2001 From: drh <> Date: Tue, 18 Aug 2026 10:33:46 +0000 Subject: [PATCH] Use a typecast to fix a possible integer overflow in the (unsupported) ext/misc/compress.c extension. [bugs:/info/2026-08-18T09:33:57Z|Bug 2026-08-18T09:33:57Z]. FossilOrigin-Name: d0f1f683b94f90ba111509ec1c108a73388579c870aa740379b28cbb00a2827b --- ext/misc/compress.c | 2 +- manifest | 12 ++++++------ manifest.uuid | 2 +- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/ext/misc/compress.c b/ext/misc/compress.c index a6b4e23e8d..92eeb2199e 100644 --- a/ext/misc/compress.c +++ b/ext/misc/compress.c @@ -102,7 +102,7 @@ static void uncompressFunc( nOut = (nOut<<7) | (pIn[i]&0x7f); if( (pIn[i]&0x80)!=0 ){ i++; break; } } - pOut = sqlite3_malloc64( nOut+1 ); + pOut = sqlite3_malloc64( (u64)nOut+1 ); if( pOut==0 ){ sqlite3_result_error_nomem(context); return; diff --git a/manifest b/manifest index 47d9f0b876..1a911891cb 100644 --- a/manifest +++ b/manifest @@ -1,5 +1,5 @@ -C Limit\sthe\snumber\sof\snested\sRIGHT\sJOINs\s(or\sFULL\sJOINs)\sthat\scan\soccur\nin\sa\ssingle\squery.\s\sReport\s[bugs:/info/2026-08-18T07:03:05Z|2026-08-18T07:03:05Z]. -D 2026-08-18T10:12:46.360 +C Use\sa\stypecast\sto\sfix\sa\spossible\sinteger\soverflow\sin\sthe\s\n(unsupported)\sext/misc/compress.c\sextension.\n[bugs:/info/2026-08-18T09:33:57Z|Bug\s2026-08-18T09:33:57Z]. +D 2026-08-18T10:33:46.805 F .fossil-settings/binary-glob 61195414528fb3ea9693577e1980230d78a1f8b0a54c78cf1b9b24d0a409ed6a x F .fossil-settings/empty-dirs dbb81e8fc0401ac46a1491ab34a7f2c7c0452f2f06b54ebb845d024ca8283ef1 F .fossil-settings/ignore-glob 35175cdfcf539b2318cb04a9901442804be81cd677d8b889fcc9149c21f239ea @@ -371,7 +371,7 @@ F ext/misc/btreeinfo.c 5fe97f798a9ee90e92b3031ed7969ec3f558661bb36b821c3ba045a17 F ext/misc/cksumvfs.c 83414e220e6cdfb29929f3154a24f32ff219d9794690bcb1b2db48f668651b35 F ext/misc/closure.c e1f115c369790512634db8d19ef4f1e45b6c1658c8fe8a9c362aa65805c8a900 F ext/misc/completion.c 3f5db28e88c3313103b2dd86d910a2944fd500c46754e473493968ce81e994a4 -F ext/misc/compress.c 5cc142aa82d1589a31c384657d0418c0eb0871348a2201e5dca32d24a0dd6654 +F ext/misc/compress.c fb2143da7dbc01f4aa4f7b56e5a98b84884703f7a215cc55b0bd8d12e95f4462 F ext/misc/csv.c 5ca451b9ce77322c4ce8476766e7ed18160e5c8b19e7cab76e13006d631b9e8f F ext/misc/dbdump.c 678f1b9ae2317b4473f65d03132a2482c3f4b08920799ed80feedd2941a06680 F ext/misc/decimal.c 0e5504e949c45df8cc69e3754bfa4f35cb341f7c055e74187693cc1f2c33afbd @@ -2219,8 +2219,8 @@ F tool/warnings-clang.sh bbf6a1e685e534c92ec2bfba5b1745f34fb6f0bc2a362850723a9ee F tool/warnings.sh a554d13f6e5cf3760f041b87939e3d616ec6961859c3245e8ef701d1eafc2ca2 F tool/win/sqlite.vsix deb315d026cc8400325c5863eef847784a219a2f F tool/winmain.c 00c8fb88e365c9017db14c73d3c78af62194d9644feaf60e220ab0f411f3604c -P 6fbed57b1447725ae9d923d69b509fd5932d8c6bae6cf6ac0d1248a943752a58 -R 8216a81991b609c836142ddd0d7dc768 +P 003ed951d85416da97f5cabf96d89b974279bd8ef2433ae1987bdedad38a4b90 +R 6b4b0611ce6cfddda2c13339b3012cc7 U drh -Z d3fdf407104a0e6adc318f283492e2dd +Z 9d95fe9ae223fd37fc65c0468d36d136 # Remove this line to create a well-formed Fossil manifest. diff --git a/manifest.uuid b/manifest.uuid index 11a1a8042e..785d3d1711 100644 --- a/manifest.uuid +++ b/manifest.uuid @@ -1 +1 @@ -003ed951d85416da97f5cabf96d89b974279bd8ef2433ae1987bdedad38a4b90 +d0f1f683b94f90ba111509ec1c108a73388579c870aa740379b28cbb00a2827b