drh
92a6c5c363
Version 3.53.3
...
FossilOrigin-Name: d4c0e51e4aeb96955b99185ab9cde75c339e2c29c3f3f12428d364a10d782c62
version-3.53.3
2026-06-26 20:14:12 +00:00
dan
3cc868b7c0
Have API functions sqlite3_serialize, sqlite3_limit, sqlite3_busy_timeout, sqlite3_error_offset, sqlite3_db_name, sqlite3_get_autocommit, sqlite3_errcode, sqlite3_total_changes64, sqlite3_changes64, sqlite3_last_insert_rowid and sqlite3_expired take and hold the database mutex while running.
...
FossilOrigin-Name: 0d57a60060ee822137f3c1cf7ba1cf40ded024d038981bd51b9cab3bf7f42b2f
2026-06-26 17:36:58 +00:00
drh
e151b6e4a1
Fix both a buffer overread and overwrite in the sessions rebase module.
...
FossilOrigin-Name: 12d0d2363a3082f68153393ed1aa91264ee987bc9187e7afd131d503f66e4faa
2026-06-26 15:17:08 +00:00
drh
a9fc90f932
Fix parsing of unterminated "[" tokens in the incremental integrity
...
check extension.
FossilOrigin-Name: 6a55dc85b73ef98f0ef31d7b0740bfe46ebb25653f2dff4eb34074d1b455925a
2026-06-26 14:47:07 +00:00
drh
948ff608ca
Avoid 32-bit integer overflow in the zipfile extension given
...
ridiculous arguments.
FossilOrigin-Name: 2e1fdfbcc91da03795d6bb27980a329dc710d5c4c8540aa6e77413e29210be0e
2026-06-26 14:22:53 +00:00
drh
a7751a871b
Fix a buffer overread that could occur in fts5 within a memcmp() when doing an integrity-check on corrupted records.
...
FossilOrigin-Name: f73adcfc87803f373b7c55ec280e3bcae4b9f3a1f3edc2ee21bf12c696a46be4
2026-06-26 14:11:19 +00:00
drh
7317e00f90
Fix parsing of quoted instantiation arguments in the spellfix extension.
...
FossilOrigin-Name: c4af6acfb0d04b418ad089ee619317a631a2dff5c7d45a88f704dbcb006f98d8
2026-06-26 13:55:52 +00:00
drh
842e4e5f20
Fix unbounded whitespace skip in the decimal extension.
...
FossilOrigin-Name: 9a1729a4840e8640770d557657742355f2723f2dda05efeaaf6641af730c34b8
2026-06-26 13:52:02 +00:00
drh
0c7f44361f
Extra margin to prevent queue overflow in the RTree extension.
...
FossilOrigin-Name: 27f80408b8a499f50959e21fb1c039c6e430257ac7ceb11f5c3600b120b64258
2026-06-26 13:36:18 +00:00
drh
549b467f48
Fix the (non-deliverable, testing-use-only) closure extension so that it
...
parses quoted instantiation arguments correctly.
FossilOrigin-Name: edfe25b68a37bde4ae535285a11b24f721fbd76d9af8ee264d62c170f45bf52c
2026-06-26 13:07:11 +00:00
drh
081c9ebeb4
Fix the size of an allocation in fts3 to take into account that when merging a phrase doclist, each entry may grow by up to 1 byte if the rhs position of the merged lists is stored.
...
FossilOrigin-Name: bbaad09b3d090ba24c2069424d94897ebdef7c5fed13db9383d9cb363e3aa91a
2026-06-26 12:59:28 +00:00
drh
1ead879172
Improved detection of corrupt freelist chains on btree pages.
...
Plus, add assert()s to verify that the min-heap does not overflow
inside of PRAGMA integrity_check.
FossilOrigin-Name: 1a888ea60be20a80e85a108a74dab0dd9faf72ca89389defeeb9c99ecafb3ea4
2026-06-26 10:02:37 +00:00
drh
36d1b6d6ab
Fix compiler warnings.
...
FossilOrigin-Name: 512d9449451c883a68a543f5ab8372b31324baf6216de7f71f7fc7589f2e1aab
2026-06-26 02:03:54 +00:00
dan
e4db8c5280
Have sqlite3_drop_modules() take the database mutex.
...
FossilOrigin-Name: 7927329d25caab7f607c8857bc6b6fc56a9ba99fbd15087076a7983b2369b4eb
2026-06-25 14:47:46 +00:00
drh
77af28550f
Check for cells extending too far past the end of a page while search
...
an index.
FossilOrigin-Name: 6826c17021eb1af5ed4266fc26486532d0fd4fb1494a582a4ff84fb59ecec254
2026-06-24 20:31:41 +00:00
drh
a2d0dcb1a0
When rolling back a journal that contains a super-journal pointer, only attempt to unlink the super-journal if (a) the filename looks like one that SQLite might have generated, and (b) the super-journal contains the name of the journal being rolled back. This is to limit the extent to which SQLite can be caused to delete arbitrary files by supplying it with a crafted hot-journal.
...
FossilOrigin-Name: 9471fa2c9ce03713b875b3350d65b5ed6e38e501585126bb3b90694800edfb25
2026-06-24 20:28:31 +00:00
drh
160a2c26d2
Fix the sqlite3ParseUri() for improved defenses against ridiculously long
...
URI inputs causing integer overflow problems.
FossilOrigin-Name: a9cea5b555eed4315e426ee8168029840cacb165d1fcd5e2d21a105db84dc46e
2026-06-24 15:16:53 +00:00
dan
81beeb9855
Revert the recent fixes to backup code and instead fix the problem reported by forum post [forum:15d82885e2 | 15d82885e2] (that a call to sqlite3_deserialize() after sqlite3_backup_init() but before the first call to sqlite3_backup_step() on the destination db of a backup could cause a crash) by deferring caching the pointer to the destination Btree until after it is locked.
...
FossilOrigin-Name: d9177ed965d1284c1c8d2c6fbb8db0dd89a42909ff0a3c23e2e761a6be419011
2026-06-24 14:27:21 +00:00
dan
b9e0f62c3a
Merge the fixes for the use-after-free problem caused by executing an ATTACH when a backup operation was active, and for the OOB read in the unused spellfix1 extension.
...
FossilOrigin-Name: 121a749d0f3d54eef7f35d527f0eed9a2531ac741452ed85d4c49556df8955ea
2026-06-23 20:28:51 +00:00
drh
486d424ed8
Do not use shared locks on SHM files when the filename is a long DOS-device
...
path. Only used shared locks for UNC paths. Do not confuse the
long-DOS-device syntax with UNC paths.
[https://bugzilla.mozilla.org/show_bug.cgi?id=2016438 |Bugzilla 2016438].
FossilOrigin-Name: 246f46614fbdbc2609ee1c6fffe446abd6c0121c3e626a1776bf7e09759bc973
2026-06-23 15:16:15 +00:00
drh
a43ebd6ecf
Fix a NULL pointer dereference that could occur in the unionvtab virtual table if the configuration SQL returned an SQL NULL value in place of a table name.
...
FossilOrigin-Name: 7e8de3ba28224a293fd1c220c3bf7ac5f721a01125debc5dce39f16745c43c17
2026-06-23 13:26:15 +00:00
drh
703395c39e
Fix a NULL pointer dereference that can occur when misusing a extension
...
virtual table that was created for testing purposes.
FossilOrigin-Name: ee4f5d82a3347863f2eb544c780d3efcc00bb43d7ea2495aaf21099f73cf800f
2026-06-23 11:16:22 +00:00
drh
4f53fb28cd
Fixes for three separate AI-discovered bugs in non-deliverable extensions.
...
FossilOrigin-Name: c980094956a348423469015952455a97df3ca08709338aa03ea8bbb418e8af24
2026-06-23 10:56:26 +00:00
stephan
06ca05fdfd
Fixes for kvvfs journaling. Bug reports [bugs:20e208fe172cae4f|2026-06-20T08:49:41Z] and [bugs:76acc88b573e3a16|2026-06-20T18:35:54Z].
...
FossilOrigin-Name: 4c773f5d64246c7c47a569218215787ba2104bc2966c4bbd8907b936e396f6ea
2026-06-22 10:38:03 +00:00
drh
d5b7e82ccd
Fix a cast in fts3_write so that it is applied as intended.
...
FossilOrigin-Name: 6c22c34e9a7bc7bb68680de87a73667f21d14bf201990040423afc426c23a4af
2026-06-19 12:14:55 +00:00
drh
b2de7df934
Fix an fts5 problem causing attempts to create locale=1 tables with more than 115 columns to fail.
...
FossilOrigin-Name: 4d993e8f5ffe4d34d4b1c579f9d50b60be6a3c6738e1c06d298e43b1222f7a66
2026-06-19 11:18:51 +00:00
drh
168184da7c
Fix CLI CSV test cases so that they suppress the CR on windows and thus
...
work cross-platform. Test case changes only - no changes to code.
FossilOrigin-Name: 89d9120af9b5ff9d2e1ed019270a539a8334c9395ea4035ecc021d90b3ddb764
2026-06-17 14:12:07 +00:00
drh
bb1d375577
Improved detection of when the alternative windows-compatible main() is
...
needed in the sqldiff.exe utility.
FossilOrigin-Name: 571846a9c2c9605680eab09ce994ad15908db2933cb104c3a88ddad9c409e6d9
2026-06-17 09:46:23 +00:00
drh
c89700b6c0
Limit VIEW recursion depth to SQLITE_LIMIT_EXPR_DEPTH to prevent
...
static overflow in malicious schemas with tens of thousands of
levels of recursive views.
FossilOrigin-Name: 38430aa5ed787ab8d24cc4d7f03b5528168e12b1f59ecfce9c471cd755b81cc7
2026-06-16 13:46:54 +00:00
drh
e9d40c821d
Fix instances of potential buffer overflow caused by loading the contents of a stat4 table with an absurd number of samples in a 32-bit build.
...
FossilOrigin-Name: c25ac7af868864f9ec05118c3b8f645e9db00d3c7e6963801fc2489e57218e2b
2026-06-16 12:02:02 +00:00
drh
d49588d0d9
Enhance SQLITE_LIMIT_TRIGGER_DEPTH so that it also limits a chain of
...
distinct triggers during code generation.
FossilOrigin-Name: b22709dcb3d967e1ad9a8c0bd0ab7335efda0933d643e734d24e8cfc79325249
2026-06-15 16:49:06 +00:00
drh
732bffada9
Fix a problem sometimes causing an UPSERT to incorrectly convert an excluded.* column from type REAL to INT in cases where doing so does not cause data loss.
...
FossilOrigin-Name: 5d344e02887996cded51e4b1febe7a3bb488b0f05465653cc0daac34e8ba036c
2026-06-15 16:46:14 +00:00
drh
2161a3d88b
Improvements to handling of inequality constraints on generate_series().value
...
against very large floating-point values.
FossilOrigin-Name: e10ff7cd09e962c207f897c38b83a813a3214fd4ac11e6a71ac577f21ba09fba
2026-06-15 16:27:51 +00:00
drh
051745a6c3
Avoid a possible buffer overrun in 32-bit builds of fts5 that could occur when processing corrupt records.
...
FossilOrigin-Name: 3a4667ce36a1548fffff8bbf946d84d6bbd21e7abb216d1f37717de74ce7e2a7
2026-06-15 13:53:44 +00:00
drh
633e08da82
Fix a problem that could cause fts5 to return incorrect answers when performing prefix queries on tokens with synonyms.
...
FossilOrigin-Name: 4f21004f9b5fc9766183a3c4ac44cfeb6cd3e5583fef9176a26fecc2910f8c08
2026-06-15 11:52:31 +00:00
drh
461f6c14c5
Fix rounding behavior in the decimal extension when all leading digits
...
are 9 and there is not fractional component.
FossilOrigin-Name: ae568e059bb179343c31baa3c8bcbe1c64fdcbb28b466af4840963c63d6369f5
2026-06-15 10:16:23 +00:00
drh
aff01bd5a4
Make the --header option to the CLI sticky, so that it does not get
...
turned off by subsequence --csv or similar mode change options.
FossilOrigin-Name: 50193066013df50af113576ae0b59af447212472da6d3824ca5aaf7dc9aab3ec
2026-06-13 18:17:08 +00:00
drh
33e4dc8833
When reading a super-journal name from a journal file, allocate a new buffer rather than using Pager.pTmpSpace. This prevents a buffer overrun that could occur when using a VFS with a large sqlite3_vfs.mxPathname value with a database with a small page size.
...
FossilOrigin-Name: aa756c803899a95d5473d32ff222950a3f80fcda5384a7b131d3ba2821af10aa
2026-06-12 18:38:10 +00:00
drh
790e97cb4f
Fix a buffer overwrite in fts3 that could occur while processing NEAR queries against corrupt records.
...
FossilOrigin-Name: 85afd8e291d280ff2124d1650720dd9934271de6efbd5a50eeaf1b621d3d0a6e
2026-06-12 16:04:50 +00:00
drh
619e38a552
When using a read-only WAL/SHM, handle a corrupt page size in the WAL
...
file correctly.
FossilOrigin-Name: 9a79ca31ff2a55af0e5e8c4d2e7126355a93848ebb8c9caa0ab351202726c63d
2026-06-12 12:20:36 +00:00
drh
2dc1c576e9
Fix a signed integer overflow that could occur in fts3 when processing corrupt database records.
...
FossilOrigin-Name: 42fe4d2e8bbb2ff9ebfd8a9b981bd8769f5273bba74cc1795396820f44a443cb
2026-06-12 11:45:37 +00:00
drh
a89c9f34d8
Fix a signed-integer overflow in fts5 that might occur when dealing with strategicly corrupted records.
...
FossilOrigin-Name: a36fc58e55c100f0c26e4426100c15287dc5613e06d5d1fb43845e3c7cda09df
2026-06-11 23:28:49 +00:00
drh
84865cd22a
Fix a possible signed integer overflow in the RBU extension given a
...
maliciously crafted delta.
FossilOrigin-Name: c40f3e8e789792615b079ea1ca7968d462a12e0cb4405bd74f407c9a4b5c6188
2026-06-11 23:26:01 +00:00
drh
801d847cd9
Harden code that processes Fossil Deltas against OOM and maliciously
...
malformed delta blobs.
FossilOrigin-Name: 1657b9716f043e1af426bbd4ed50073b76c7c1b2f147b124b0b32e824bb83eb3
2026-06-11 23:22:57 +00:00
drh
d7436d6cf1
Enhance the ".ar -x" command to add the undocumented --debug option and
...
to give enhanced robustness to deliberately malformed archives.
FossilOrigin-Name: cd7bb77fdf6c7bad89068d4138f74a950b67a87cc1582de6172b3547519387cb
2026-06-11 23:18:21 +00:00
drh
3b161d32a0
Improved detection of corrupt node IDs in RTree shadow tables.
...
FossilOrigin-Name: 4e875ae5c3f0cb28fd40be9f1327d7496f95a55785cad68cb37472e4d1c2e6fd
2026-06-11 01:37:00 +00:00
drh
78a50f9e74
Fix four obscure yet separate problems in FTS5.
...
FossilOrigin-Name: a6eb055c35f091a8e864c1de3387d389e2bd3025c32596c0b7a78ebdf091898b
2026-06-08 19:23:56 +00:00
drh
9403250ef8
Disable the vector-IN-SELECT optimization if the number of columns is so
...
large that it would cause the WhereTerm.nChild column to wrap.
FossilOrigin-Name: 10d9da4f48623419f9abed17cd05cfa08743377926ca96cf6b457dc01ab062e2
2026-06-04 16:58:53 +00:00
drh
d9439caee6
Fix a crash that could be caused by configuring the pager-cache with a bulk allocation too small to fit even one page.
...
FossilOrigin-Name: 3be41e17529d34d083463d967bcb7e07515ce0d6ba616a4a04a68f162ba0cf7f
2026-06-04 12:27:17 +00:00
drh
eaba46222c
Remove the data type ANY added to the shell's CSV imports.
...
FossilOrigin-Name: e14e19c1b33b4f4fe7d9008b0f7f8fa9522d901c13124b0eca4b91acd7156d0d
2026-06-04 11:35:15 +00:00