[sqlite] Fortify SCA Buffer Overflow in sqlite3.c

On 05/14/2015 01:47 PM, Held, Douglas wrote: > > A team of mine wants to use SQLCipher so I scanned it with Fortify SCA. > SQLCipher includes sqlite3.c version 3.8.8.3. The software has reported a > Buffer Overflow (off-by-one) in the following C code: > > In sqlite3.c, it says the overflow

[sqlite] VBA Sqllite blob data

Thank you for all of your suggestions and tips. I have been able to use the code samples and extract the data that I needed from my database in a test scenario. I am now modifying it to work with the live database. Thanks again. Preston King, NHCPM NH Department of Information Technology at

[sqlite] Patch for build on ppc64le systems

On 5/14/15, Paul G Crumley wrote: > > I am happy to validate operation on the POWER system for you once the > latest config.guess and config.sub files are in the sqlite source. > The latest check-in (https://www.sqlite.org/src/info/be438d049dd9d7aa) upgrades to autoconf 2.69. Can you please

[sqlite] Patch for build on ppc64le systems

Hello, Today, while trying to install the apsw package for python on an IBM POWER system I found I needed a new version of sqlite. I tried to build sqlite from sqlite-configure-3801001.tar.gz on an IBM POWER system running ubuntu and the build failed due to a lack of knowledge of ppc64le in

[sqlite] Fortify SCA Buffer Overflow in sqlite3.c

a || p->nSrc==0 ); 96491: for(i=p->nSrc-1; i>0; i--){ 96492: p->a[i].jointype = p->a[i-1].jointype; 96493: } 96494: p->a[0].jointype = 0; 96495: } 96496: } The declaration of this buffer 'a' is on line 11973: 11946: struct SrcList { 11947: int nSrc;/* Number of

[sqlite] xBestIndex() implementation question

Hi Eric, Sure, that is one option. But I'm just wondering if inside the xBestIndex() we can get the value field, we can do a much better job to give the cardinality info. Jilong -Original Message- From: sqlite-users-bounces at mailinglists.sqlite.org

[sqlite] xBestIndex() implementation question

I'm just a few days into an xBestIndex/xFilter implementation myself, but my approach is, if I can create the requested index, I set the cost to log(number of rows) of the table, and if I am choosing not to create the requested index, I set the cost to number of rows. I suspect that gives

[sqlite] Query on Sample SQLite Application

On 13 May 2015, at 6:59pm, raj at OnSiteSoftware.com wrote: > We Inserted 1000 rec, where we were able to insert all records, but not > able to fetch it. When you tried to fetch it, did you get an error result ? If so, what number result did you get ? Can you try fetching just 1 record,

[sqlite] xBestIndex() implementation question

Hello, I'm working on a project using SQLite virtual table. Now I have a problem about the implementation of xBestIndex() function, in particular, the estimatedRow and estimatedCost variables. As the aConstraint array does not contain the RHS expression value for each constraint (only iColumn

[sqlite] Fortify SCA Buffer Overflow in sqlite3.c

C allows declaration of arrays at the end of structures. If the structure is allocated with a known addtional space, then this is not an issue. Likely the index will be greater than 1... so the issue would be that it would appear to overflow anyway. However, various C compilers have various

[sqlite] sqlite3: sqlite3_step() return SQLITE_FULL error.

Hi, I came across one more situation in which have to open multiple DB in the same process, and document says We have to assign this value as soon as opening the DB to avoid the conflicts. I think it can be assign this before opening the DB also, Am I right? If the path of