Compare commits

..
Author SHA1 Message Date
openeuler-ci-bot 31498bc42c !29 update source0 url in spec file
Merge pull request !29 from lihaotian/new_LTS
2020-09-03 15:48:51 +08:00
lihaotian9 d5276129ec Update the source0 url in spec file 2020-09-03 14:19:35 +08:00
openeuler-ci-bot 5df5511783 !26 update package to 3.32.3
Merge pull request !26 from Markeryang/openEuler-20.03-LTS
2020-08-25 19:16:17 +08:00
Markeryang d6b2326d7d update package to 3.32.3
update package to 3.32.3
2020-08-25 15:29:41 +08:00
zhanliwen 6339a6cc8a update to 3.32.3 2020-08-25 15:19:07 +08:00
openeuler-ci-bot 96193cf35b !24 fix CVE-2020-13871
Merge pull request !24 from Markeryang/openEuler-20.03-LTS
2020-08-04 16:00:02 +08:00
Markeryang 535b7d332e update sqlite.spec. 2020-08-04 15:14:29 +08:00
Markeryang b5718f9b04 Fix CVE-2020-13871
Fix CVE-2020-13871
2020-08-04 15:03:24 +08:00
openeuler-ci-bot c8f752305a !23 fix CVE-2020-13631 CVE-2020-15358
Merge pull request !23 from Markeryang/openEuler-20.03-LTS
2020-08-04 14:49:29 +08:00
Markeryang a97ba4bafc rename 0006-sqlite-no-malloc-usable-size.patch to 0007-sqlite-no-malloc-usable-size.patch. 2020-08-04 14:28:13 +08:00
Markeryang fdc60426fe rename 0005-Fix-CVE-2020-13631.patch to 0006-Fix-CVE-2020-13631.patch. 2020-08-04 14:27:50 +08:00
Markeryang 0bc5c71e92 rename 0004-Fix-CVE-2020-15358.patch to 0005-Fix-CVE-2020-15358.patch. 2020-08-04 14:27:27 +08:00
Markeryang a8a4f7d036 rename 0003-Fix-CVE-2020-11656.patch to 0004-Fix-CVE-2020-11656.patch. 2020-08-04 14:26:24 +08:00
Markeryang 1d44d96f90 rename 0002-Fix-CVE-2020-11655.patch to 0003-Fix-CVE-2020-11655.patch. 2020-08-04 14:25:00 +08:00
Markeryang fd617774e5 rename 0001-0002-Fix-CVE-2020-9327.patch to 0002-Fix-CVE-2020-9327.patch. 2020-08-04 14:24:33 +08:00
Markeryang 54a77ef1a9 rename 0000-0001-Fix-CVE-2020-9327.patch to 0001-Fix-CVE-2020-9327.patch. 2020-08-04 14:24:05 +08:00
Markeryang 0dd031ef19 update sqlite.spec. 2020-08-04 14:23:47 +08:00
Markeryang aaa156267f update sqlite.spec. 2020-08-04 09:49:22 +08:00
Markeryang dbf2fe2ade update sqlite.spec. 2020-08-04 09:02:40 +08:00
Markeryang 1c9ec00e1b update sqlite.spec. 2020-08-04 08:59:25 +08:00
Markeryang 84a4960c12 rename 6003-Fix-CVE-2020-11656.patch to 0003-Fix-CVE-2020-11656.patch. 2020-08-04 08:55:51 +08:00
Markeryang 2e62e8b4d4 rename 6002-Fix-CVE-2020-11655.patch to 0002-Fix-CVE-2020-11655.patch. 2020-08-04 08:55:30 +08:00
Markeryang 2573148f02 rename 6001-0002-Fix-CVE-2020-9327.patch to 0001-0002-Fix-CVE-2020-9327.patch. 2020-08-04 08:55:03 +08:00
Markeryang 47c8e1aa97 rename 0000-sqlite-no-malloc-usable-size.patch to 0006-sqlite-no-malloc-usable-size.patch. 2020-08-04 08:54:38 +08:00
Markeryang b6ff332de2 rename 6000-0001-Fix-CVE-2020-9327.patch to 0000-0001-Fix-CVE-2020-9327.patch. 2020-08-04 08:54:13 +08:00
Markeryang ae3d919fb4 update sqlite.spec. 2020-08-03 17:52:42 +08:00
Markeryang f461942ca6 update sqlite.spec. 2020-08-03 17:52:05 +08:00
Markeryang a9fb3a7181 add 0005-Fix-CVE-2020-13631.patch.
add 0005-Fix-CVE-2020-13631.patch.
2020-08-03 17:48:38 +08:00
Markeryang f279132e49 add 0004-Fix-CVE-2020-15358.patch.
0004-Fix-CVE-2020-15358.patch
2020-08-03 17:47:32 +08:00
openeuler-ci-bot 920187b9f1 !16 update sqlite to 3310100
Merge pull request !16 from lfl/master
2020-05-13 14:40:36 +08:00
wubo009 c6c12b31bc update pkg in lts branch 2020-05-12 23:06:17 +08:00
8 changed files with 40 additions and 180 deletions
-44
View File
@@ -1,44 +0,0 @@
diff -rNu a/ext/expert/sqlite3expert.c b/ext/expert/sqlite3expert.c
--- a/ext/expert/sqlite3expert.c 2021-11-25 09:00:19.267831518 +0800
+++ b/ext/expert/sqlite3expert.c 2021-11-25 09:07:38.551969861 +0800
@@ -690,11 +690,13 @@
rc = idxPrintfPrepareStmt(db, &p1, pzErrmsg, "PRAGMA table_xinfo=%Q", zTab);
while( rc==SQLITE_OK && SQLITE_ROW==sqlite3_step(p1) ){
const char *zCol = (const char*)sqlite3_column_text(p1, 1);
+ const char *zColSeq = 0;
nByte += 1 + STRLEN(zCol);
rc = sqlite3_table_column_metadata(
- db, "main", zTab, zCol, 0, &zCol, 0, 0, 0
+ db, "main", zTab, zCol, 0, &zColSeq, 0, 0, 0
);
- nByte += 1 + STRLEN(zCol);
+ if( zColSeq==0 ) zColSeq = "binary";
+ nByte += 1 + STRLEN(zColSeq);
nCol++;
nPk += (sqlite3_column_int(p1, 5)>0);
}
@@ -714,6 +716,7 @@
nCol = 0;
while( rc==SQLITE_OK && SQLITE_ROW==sqlite3_step(p1) ){
const char *zCol = (const char*)sqlite3_column_text(p1, 1);
+ const char *zColSeq = 0;
int nCopy = STRLEN(zCol) + 1;
pNew->aCol[nCol].zName = pCsr;
pNew->aCol[nCol].iPk = (sqlite3_column_int(p1, 5)==1 && nPk==1);
@@ -721,12 +724,13 @@
pCsr += nCopy;
rc = sqlite3_table_column_metadata(
- db, "main", zTab, zCol, 0, &zCol, 0, 0, 0
+ db, "main", zTab, zCol, 0, &zColSeq, 0, 0, 0
);
if( rc==SQLITE_OK ){
- nCopy = STRLEN(zCol) + 1;
+ if( zColSeq==0 ) zColSeq = "binary";
+ nCopy = STRLEN(zColSeq) + 1;
pNew->aCol[nCol].zColl = pCsr;
- memcpy(pCsr, zCol, nCopy);
+ memcpy(pCsr, zColSeq, nCopy);
pCsr += nCopy;
}
-80
View File
@@ -1,80 +0,0 @@
From effc07ec9c6e08d3bd17665f8800054770f8c643 Mon Sep 17 00:00:00 2001
From: drh <>
Date: Fri, 15 Jul 2022 12:34:31 +0000
Subject: [PATCH] Fix the whereKeyStats() routine (part of STAT4 processing
only) so that it is able to cope with row-value comparisons against the
primary key index of a WITHOUT ROWID table.
[forum:/forumpost/3607259d3c|Forum post 3607259d3c].
FossilOrigin-Name: 2a6f761864a462de5c2d5bc666b82fb0b7e124a03443cd1482620dde344b34bb
---
src/where.c | 4 ++--
test/rowvalue.test | 31 +++++++++++++++++++++++++++++++
2 files changed, 33 insertions(+), 2 deletions(-)
diff --git a/src/where.c b/src/where.c
index de6ea91e3..110eb4845 100644
--- a/src/where.c
+++ b/src/where.c
@@ -1433,7 +1433,7 @@ static int whereKeyStats(
#endif
assert( pRec!=0 );
assert( pIdx->nSample>0 );
- assert( pRec->nField>0 && pRec->nField<=pIdx->nSampleCol );
+ assert( pRec->nField>0 );
/* Do a binary search to find the first sample greater than or equal
** to pRec. If pRec contains a single field, the set of samples to search
@@ -1479,7 +1479,7 @@ static int whereKeyStats(
** it is extended to two fields. The duplicates that this creates do not
** cause any problems.
*/
- nField = pRec->nField;
+ nField = MIN(pRec->nField, pIdx->nSample);
iCol = 0;
iSample = pIdx->nSample * nField;
do{
diff --git a/test/rowvalue.test b/test/rowvalue.test
index 12fee8237..59b44d938 100644
--- a/test/rowvalue.test
+++ b/test/rowvalue.test
@@ -751,4 +751,35 @@ do_execsql_test 30.3 {
+# 2022-07-15
+# https://sqlite.org/forum/forumpost/3607259d3c
+#
+reset_db
+do_execsql_test 33.1 {
+ CREATE TABLE t1(a INT, b INT PRIMARY KEY) WITHOUT ROWID;
+ INSERT INTO t1(a, b) VALUES (0, 1),(15,-7),(3,100);
+ ANALYZE;
+} {}
+do_execsql_test 33.2 {
+ SELECT * FROM t1 WHERE (b,a) BETWEEN (0,5) AND (99,-2);
+} {0 1}
+do_execsql_test 33.3 {
+ SELECT * FROM t1 WHERE (b,a) BETWEEN (-8,5) AND (0,-2);
+} {15 -7}
+do_execsql_test 33.3 {
+ SELECT * FROM t1 WHERE (b,a) BETWEEN (3,5) AND (100,4);
+} {3 100}
+do_execsql_test 33.3 {
+ SELECT * FROM t1 WHERE (b,a) BETWEEN (3,5) AND (100,2);
+} {}
+do_execsql_test 33.3 {
+ SELECT * FROM t1 WHERE (a,b) BETWEEN (-2,99) AND (1,0);
+} {0 1}
+do_execsql_test 33.3 {
+ SELECT * FROM t1 WHERE (a,b) BETWEEN (14,99) AND (16,0);
+} {15 -7}
+do_execsql_test 33.3 {
+ SELECT * FROM t1 WHERE (a,b) BETWEEN (2,99) AND (4,0);
+} {3 100}
+
finish_test
--
2.25.1
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
+40 -52
View File
@@ -1,24 +1,23 @@
%bcond_without check
%global extver 3360000
%global extver 3320300
%global tcl_version 8.6
%global tcl_sitearch %{_libdir}/tcl%{tcl_version}
%global year 2020
Name: sqlite
Version: 3.36.0
Release: 3
Version: 3.32.3
Release: 2
Summary: Embeded SQL database
License: Public Domain
URL: http://www.sqlite.org/
Source0: https://www.sqlite.org/2021/sqlite-src-%{extver}.zip
Source1: http://www.sqlite.org/2021/sqlite-doc-%{extver}.zip
Source2: https://www.sqlite.org/2021/sqlite-autoconf-%{extver}.tar.gz
Source0: https://www.sqlite.org/%{year}/sqlite-src-%{extver}.zip
Source1: http://www.sqlite.org/%{year}/sqlite-doc-%{extver}.zip
Source2: https://www.sqlite.org/%{year}/sqlite-autoconf-%{extver}.tar.gz
Patch1: 0001-sqlite-no-malloc-usable-size.patch
Patch2: 0002-remove-fail-testcase-in-no-free-fd-situation.patch
Patch3: 0003-CVE-2021-36690.patch
Patch4: 0004-CVE-2022-35737.patch
BuildRequires: gcc autoconf tcl tcl-devel
BuildRequires: ncurses-devel readline-devel glibc-devel
@@ -63,8 +62,7 @@ This contains man files and HTML files for the using of sqlite.
%setup -q -a1 -n %{name}-src-%{extver}
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
rm -f %{name}-doc-%{extver}/sqlite.css~ || :
@@ -106,6 +104,8 @@ chmod 755 %{buildroot}/%{tcl_sitearch}/sqlite3/*.so
%check
export LD_LIBRARY_PATH=`pwd`/.libs
export MALLOC_CHECK_=3
#bypass zipfile.test
rm test/zipfile.test
%ifarch x86_64 %{ix86}
%else
@@ -135,59 +135,47 @@ make test
%{_mandir}/man*/*
%changelog
* Tue Aug 16 2022 liusirui <liusirui@huawei.com> - 3.36.0-3
- fix the CVE-2022-35737.
* Sat Nov 27 2021 wbq_sky <wangbingquan@huawei.com> - 3.36.0-2
- fix the CVE-2021-36690.
* Fri Nov 25 2021 wbq_sky <wangbingquan@huawei.com> - 3.36.0-1
- update to 3.36.0.
* Fri Sep 26 2021 wbq_sky <wangbingquan@huawei.com> - 3.34.0-4
- fix the uninitialized value used in pattern match.
* Fri Sep 3 2021 wbq_sky <wangbingquan@huawei.com> - 3.34.0-3
- fix the null reference in the tigger statement.
* Fri Sep 3 2021 wbq_sky <wangbingquan@huawei.com> - 3.34.0-2
- fix the infinite loop problem in the trim function while the pattern is well formed.
* Thu Jan 14 2021 yanglongkang <yanglongkang@huawei.com> - 3.34.0-1
- update package to 3.34.0
* Thu Sep 3 2020 lihaotian<lihaotian9@huawei.com> - 3.32.3-3
* Thu Sep 2 2020 lihaotian<lihaotian9@huawei.com> - 3.32.3-2
- update source0 url
* Tue Jul 21 2020 jixinjie <jixinjie@huawei.com> - 3.32.3-2
- update yaml file
* Tue Jul 21 2020 jixinjie <jixinjie@huawei.com> - 3.32.3-1
* Tue Aug 25 2020 yanglongkang <yanglongkang@huawei.com> - 3.32.3-1
- update package to 3.32.3
* Tue Jun 30 2020 volcanodragon <linfeilong@huawei.com> - 3.24.0-12
- Type:enhancement
- ID:NA
- SUG:NA
- DESC:rename patches
* Tue Jun 23 2020 yanglongkang <yanglongkang@huawei.com> - 3.24.0-11
* Tue Aug 4 2020 yanglongkang <yanglongkang@huawei.com> - 3.31.1-2
- Type:cves
- ID:CVE-2020-13434 CVE-2020-13435 CVE-2020-13630 CVE-2020-13632
- SUG:NA
- DESC:fix CVE-2020-13434 CVE-2020-13435 CVE-2020-13630 CVE-2020-13632
- ID:CVE-2020-13871
- SUG: NA
- DESC: fix cve
* Sun Apr 19 2020 ethan848 <mingfangsen@huawei.com>
* Mon Aug 3 2020 yanglongkang <yanglongkang@huawei.com> - 3.31.1-1
- Type:cves
- ID:CVE-2020-15358 CVE-2020-13631
- SUG: NA
- DESC: fix cve
* Fri Apr 17 2020 luoshijie <luoshijie1@huawei.com> - 3.31.1-0
- Type:enhancement
- ID:NA
- SUG:NA
- DESC:CVE-2020-11655 fixed
- SUG:restart
- DESC:update sqlite to 3.31.1.
* Tue Mar 10 2020 steven <steven_ygui@163.com> - 3.24.0-9
* Tue Mar 10 2020 guiyao <guiyao@huawei.com> - 3.24.0-11
- Type:cves
- ID:CVE-2020-9327
- SUG: NA
- DESC: fix cve
* Fri Feb 28 2020 sunshihao <sunshihao@huawei.com> - 3.24.0-10
- Type:enhancement
- ID:NA
- ID:
- SUG: NA
- DESC: remove suffix information
* Wed Feb 26 2020 guiyao <guiyao@huawei.com> - 3.24.0-9
- Type:cves
- ID:CVE-2018-20505
- SUG:NA
- DESC:CVE-2018-20505, CVE-2020-9327 fixed
- DESC:fix cves
* Wed Jan 11 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.24.0-8
- Type:enhancement
-4
View File
@@ -1,4 +0,0 @@
version_control: fossil
src_repo: https://www.sqlite.org/src
tag_prefix: "version-"
seperator: "."