[sqlite] Crash bug in Sqlite

2020-01-03 Thread Yongheng Chen
Hi, We found a crash bug in sqlite. Here’s the POC: — CREATE VIRTUAL TABLE v0 USING rtree ( v3 AS( '1994-01-01' ) CHECK( v3 ) CHECK( v3 NOT LIKE 'y' ) GENERATED ALWAYS AS( ( SELECT 10.10 * AVG ( v3 ) FROM v0 WHERE v1 = v3 ) ) , v2 , v1 ) ; SELECT count ( * ) , max ( v3 ) FROM v0 ; CREATE

[sqlite] Crash bug in sqlite

2020-01-03 Thread Yongheng Chen
Hi, We found a crash bug in sqlite. Here’s the POC: — CREATE VIRTUAL TABLE v0 USING fts4 ( v1 AS( typeof ( v5 ) ) , v6 UNIQUE GENERATED ALWAYS AS( v5 ) , v2 INT , v3 INT UNIQUE GENERATED ALWAYS AS( NULL ) , v4 INTEGER UNIQUE , v5 DOUBLE PRIMARY KEY CHECK( v4 ) , v7 VARCHAR(20) UNIQUE

[sqlite] Crash Bug In sqlite

2019-12-31 Thread Yongheng Chen
Hi, We found a crash bug in sqlite. Here’s the POC: — CREATE VIRTUAL TABLE v0 USING fts4 ( v1 , v2 , v3 , v4 ) ; INSERT INTO v0 ( v1 ) VALUES ( 10 ) ,( 10 ) ; CREATE TABLE v5 ( v6 UNIQUE NOT NULL PRIMARY KEY UNIQUE ) ; INSERT INTO v5 ( v6 , v6 ) SELECT nullif ( DISTINCT zeroblob ( julianday

Re: [sqlite] Crash bug in sqlite

2019-12-24 Thread Richard Hipp
On 12/24/19, Yongheng Chen wrote: > Hi, > > We found a crash bug in sqlite. Introduced yesterday afternoon by check-in https://sqlite.org/src/info/eb95dac7f6482c36 -- D. Richard Hipp d...@sqlite.org ___ sqlite-users mailing list sql

[sqlite] Crash bug in sqlite

2019-12-24 Thread Yongheng Chen
Hi, We found a crash bug in sqlite. Here’s the PoC: — CREATE TABLE v0 ( v1 INTEGER PRIMARY KEY ) ; INSERT INTO v0 ( v1 ) VALUES ( 0 ) ,( 1 ) ,( 10 ) ON CONFLICT DO NOTHING ; CREATE VIRTUAL TABLE v2 USING rtree ( v5 UNIQUE ON CONFLICT ABORT , v4 , v3 ) ; SELECT 'MED BOX' - 'a' FROM v0 LEFT JOIN

Re: [sqlite] Crash Bug in Sqlite

2019-12-19 Thread Jose Isaias Cabrera
Yongheng Chen, on Thursday, December 19, 2019 04:29 PM, wrote... > > Hi, > > We found another crash in Sqlite. Here’s the POC: > — > CREATE TABLE v0 ( v1 , v2 ) ; > SELECT 10 , 1 UNION SELECT v2 , dense_rank () OVER( ORDER BY - 10 ) FROM > v0 ; > — > > This bug exists in both the latest

[sqlite] Crash Bug in Sqlite

2019-12-19 Thread Yongheng Chen
Hi, We found another crash in Sqlite. Here’s the POC: — CREATE TABLE v0 ( v1 , v2 ) ; SELECT 10 , 1 UNION SELECT v2 , dense_rank () OVER( ORDER BY - 10 ) FROM v0 ; — This bug exists in both the latest development code and the release code. Yongheng & Rui

Re: [sqlite] Crash bug in Sqlite

2019-12-19 Thread Jose Isaias Cabrera
Yongheng Chen, on Thursday, December 19, 2019 01:21 PM, wrote... > > Hi, > > We found another crash in Sqlite. Here’s the POC: > — > CREATE TABLE v0 ( v1 INTEGER PRIMARY KEY ) ; > CREATE VIEW v2 ( v3 ) AS SELECT DISTINCT ( SELECT DISTINCT v1 , v1 , v1 , > v3 , v1 , v3 , v1 , 10.10 ) ; >

[sqlite] Crash bug in Sqlite

2019-12-19 Thread Yongheng Chen
Hi, We found another crash in Sqlite. Here’s the POC: — CREATE TABLE v0 ( v1 INTEGER PRIMARY KEY ) ; CREATE VIEW v2 ( v3 ) AS SELECT DISTINCT ( SELECT DISTINCT v1 , v1 , v1 , v3 , v1 , v3 , v1 , 10.10 ) ; CREATE TABLE v4 ( v5 INTEGER PRIMARY KEY , v6 INT ); DELETE FROM v0 WHERE NULL BETWEEN

Re: [sqlite] Crash bug in Sqlite

2019-12-19 Thread Jose Isaias Cabrera
Yongheng Chen, on Thursday, December 19, 2019 09:54 AM, wrote... > > Hi, > > We found another crash in Sqlite. Here’s the POC: > — > CREATE TABLE v0 ( v7 FLOAT , v3 DOUBLE , v6 TEXT , v1 INTEGER UNIQUE , v5 > DOUBLE , v2 VARCHAR(20) UNIQUE , v4 ) ; > REPLACE INTO v0 ( v6 , v3 , v2 ) VALUES ( 10 ,

[sqlite] Crash bug in Sqlite

2019-12-19 Thread Yongheng Chen
Hi, We found another crash in Sqlite. Here’s the POC: — CREATE TABLE v0 ( v7 FLOAT , v3 DOUBLE , v6 TEXT , v1 INTEGER UNIQUE , v5 DOUBLE , v2 VARCHAR(20) UNIQUE , v4 ) ; REPLACE INTO v0 ( v6 , v3 , v2 ) VALUES ( 10 , 10 , 10 ); CREATE VIRTUAL TABLE v8 USING zipfile ( v9 DOUBLE ) ; REPLACE INTO

Re: [sqlite] Crash bug in Sqlite

2019-12-18 Thread Jose Isaias Cabrera
Yongheng Chen, on Wednesday, December 18, 2019 10:45 AM, wrote... > > Hi, > > We found another crash in Sqlite. Here’s the POC: > > — > CREATE TABLE v0 ( v2 INTEGER UNIQUE ON CONFLICT IGNORE , v1 TEXT PRIMARY > KEY ) ; > CREATE VIEW v3 ( v4 ) AS SELECT v2 IN ( 9223372036854775808 , ( printf () >

[sqlite] Crash bug in Sqlite

2019-12-18 Thread Yongheng Chen
Hi, We found another crash in Sqlite. Here’s the POC: — CREATE TABLE v0 ( v2 INTEGER UNIQUE ON CONFLICT IGNORE , v1 TEXT PRIMARY KEY ) ; CREATE VIEW v3 ( v4 ) AS SELECT v2 IN ( 9223372036854775808 , ( printf () IN ( 0 , 0 ) ) , 10 , 10 , 10 ) AS AVG_YEARLY FROM v0 ; CREATE TABLE v5 ( v6 , v7 )

Re: [sqlite] Crash Bug in Sqlite

2019-12-17 Thread Yongheng Chen
It’s Yongheng & Rui. Sorry for the typo. > On Dec 17, 2019, at 4:58 PM, Jose Isaias Cabrera wrote: > > > Yongheng Chen, on Tuesday, December 17, 2019 04:21 PM, wrote... >> >> Hi, >> >> We found a bug that crashes Sqlite. Here’s the test case: >> >> —— >> CREATE TABLE v0 ( v1 UNIQUE , v2

Re: [sqlite] Crash Bug in Sqlite

2019-12-17 Thread Yongheng Chen
We just took a look at the bug. The value of the accessed address in the crash point can be controlled by the value in the second line of the test input, which means: —— ……. CREATE VIEW v3 ( v4 ) AS SELECT max ( ( SELECT count ( v1 ) OVER( ORDER BY 1234 ASC ) ) ) FROM v0 ; ….. —— — Then

Re: [sqlite] Crash Bug in Sqlite

2019-12-17 Thread Jose Isaias Cabrera
Yongheng Chen, on Tuesday, December 17, 2019 04:21 PM, wrote... > > Hi, > > We found a bug that crashes Sqlite. Here’s the test case: > > —— > CREATE TABLE v0 ( v1 UNIQUE , v2 VARCHAR(80) NULL PRIMARY KEY ) ; > CREATE VIEW v3 ( v4 ) AS SELECT max ( ( SELECT count ( v1 ) OVER( ORDER > BY 10 ASC )

[sqlite] Crash Bug in Sqlite

2019-12-17 Thread Yongheng Chen
Hi, We found a bug that crashes Sqlite. Here’s the test case: —— CREATE TABLE v0 ( v1 UNIQUE , v2 VARCHAR(80) NULL PRIMARY KEY ) ; CREATE VIEW v3 ( v4 ) AS SELECT max ( ( SELECT count ( v1 ) OVER( ORDER BY 10 ASC ) ) ) FROM v0 ; SELECT * FROM v3 WHERE - 'b' >= v4 AND v4 > 10 OR ( v4 BETWEEN