Re: [sqlite] List of innocuous functions?

2020-01-25 Thread sky5walk
Doh! I'm on 3.30.0.
Gotcha, thanks.

On Sat, Jan 25, 2020 at 8:22 PM Richard Hipp  wrote:

> On 1/25/20, sky5w...@gmail.com  wrote:
> > SELECT DISTINCT name FROM pragma_function_list
> > --WHERE (flags & 0x20)!=0 -- no such column: flags
> > ORDER BY name;
> >
> > Works if I drop the WHERE.
> > Is there a special compile flag that must be used?
>
> You need to be using SQLite 3.31.0 or later.
> --
> D. Richard Hipp
> d...@sqlite.org
> ___
> sqlite-users mailing list
> sqlite-users@mailinglists.sqlite.org
> http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
>
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] List of innocuous functions?

2020-01-25 Thread Richard Hipp
On 1/25/20, sky5w...@gmail.com  wrote:
> SELECT DISTINCT name FROM pragma_function_list
> --WHERE (flags & 0x20)!=0 -- no such column: flags
> ORDER BY name;
>
> Works if I drop the WHERE.
> Is there a special compile flag that must be used?

You need to be using SQLite 3.31.0 or later.
-- 
D. Richard Hipp
d...@sqlite.org
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] List of innocuous functions?

2020-01-25 Thread sky5walk
SELECT DISTINCT name FROM pragma_function_list
--WHERE (flags & 0x20)!=0 -- no such column: flags
ORDER BY name;

Works if I drop the WHERE.
Is there a special compile flag that must be used?

On Fri, Jan 24, 2020 at 5:42 PM Brian Curley  wrote:

> separate but somewhat related question, based on the response:
>
>Has any thought been given to updating the documentation to cover those
> pragmas that have been upgraded to selectable entities?
>
> I've only been able to find a handful of references along the way, such as
> pragma_table_info, pragma_index_info, and the aforementioned
> pragma_function_list, at least that I recall. Any sort of listing of what's
> available like these?
>
> I'd think that it would be helpful in the peanut gallery. Thanks!
>
> Regards.
>
> Brian P Curley
>
>
>
> On Fri, Jan 24, 2020 at 4:12 PM Richard Hipp  wrote:
>
> > SELECT DISTINCT name
> >FROM pragma_function_list
> >  WHERE (flags & 0x20)!=0
> >  ORDER BY name;
> >
> > On 1/24/20, Peter Kolbus  wrote:
> > > Is there any documentation showing, or an easy way to generate, the
> exact
> > > list of SQLite-provided functions that are innocuous?
> > >
> > > I’d like to turn on the new SQLITE_TRUSTED_SCHEMA but support a variety
> > of
> > > applications and am hoping for something to guide analysis.
> > >
> > > Thanks
> > > -Peter
> > > ___
> > > sqlite-users mailing list
> > > sqlite-users@mailinglists.sqlite.org
> > > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
> > >
> >
> >
> > --
> > D. Richard Hipp
> > d...@sqlite.org
> > ___
> > sqlite-users mailing list
> > sqlite-users@mailinglists.sqlite.org
> > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
> >
> ___
> sqlite-users mailing list
> sqlite-users@mailinglists.sqlite.org
> http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
>
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] Performance regression since 3.19.0

2020-01-25 Thread Peter Inglesby
Hi -- I've not heard anything more about this, and I don't see a bug listed
at https://www.sqlite.org/src/rptview?rn=1.

Will it be addressed as a bug?

I hope I'm not coming across as demanding a fix -- I just want to make sure
this hasn't fallen through the gaps!

On Mon, 6 Jan 2020 at 20:24, Peter Inglesby 
wrote:

>
> How does the performance compare with this:
>>
>> CREATE TABLE t1 (a TEXT, b TEXT);
>> CREATE TABLE t2 (a TEXT, b TEXT);
>> CREATE INDEX t1_a ON t1 (a,b);
>> CREATE INDEX t2_a ON t2 (a,b);
>>
>> SELECT *
>> FROM t1 LEFT JOIN t2 ON (t1.b=t2.b AND t2.a='123')
>> WHERE t1.a='123';
>>
>
> Here are best-of-three averages for my version and your version for both
> the good and bad commits:
>
> good / mine :: <0.1s
> bad / mine :: 12.5s
> good / yours :: 0.2s
> bad / yours :: 0.2s
>
> In other words, there is no regression for your version.  But it does not
> return as quickly as my version does before the regression.
>
>
>> Run "ANALYZE;" on a database that contains actual data, then send us
>> the output of ".fullschema"
>>
>
> Here you go:
>
> sqlite> analyze;
> sqlite> .fullschema
> CREATE TABLE t1 (a TEXT, b TEXT);
> CREATE TABLE t2 (a TEXT, b TEXT);
> CREATE INDEX t1_a ON t1 (a);
> CREATE INDEX t1_b ON t1 (b);
> CREATE INDEX t2_a ON t2 (a);
> CREATE INDEX t2_b ON t2 (b);
> ANALYZE sqlite_master;
> ANALYZE sqlite_master;
> INSERT INTO sqlite_stat1 VALUES('t2','t2_b','100 1000');
> INSERT INTO sqlite_stat1 VALUES('t2','t2_a','100 1000');
> INSERT INTO sqlite_stat1 VALUES('t1','t1_b','100 1000');
> INSERT INTO sqlite_stat1 VALUES('t1','t1_a','100 1000');
> ANALYZE sqlite_master;
>
> The sqlite_stat1 values make sense, because there are 1,000,000 rows in
> each of t1 and t2, with 1,000 values for each of a and b.
>
> After running ANALYZE, the origin query returns in 2.7s, but the query
> plan is unchanged.
>
> On Mon, 6 Jan 2020 at 01:53, Richard Hipp  wrote:
>
>> How does the performance compare with this:
>>
>> CREATE TABLE t1 (a TEXT, b TEXT);
>> CREATE TABLE t2 (a TEXT, b TEXT);
>> CREATE INDEX t1_a ON t1 (a,b);
>> CREATE INDEX t2_a ON t2 (a,b);
>>
>> SELECT *
>> FROM t1 LEFT JOIN t2 ON (t1.b=t2.b AND t2.a='123')
>> WHERE t1.a='123';
>>
>>
>> On 1/5/20, Peter Inglesby  wrote:
>> > Is there any more information I could provide?
>>
>> Run "ANALYZE;" on a database that contains actual data, then send us
>> the output of ".fullschema"
>>
>> --
>> D. Richard Hipp
>> d...@sqlite.org
>> ___
>> sqlite-users mailing list
>> sqlite-users@mailinglists.sqlite.org
>> http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
>>
>
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SSL: cannot connect to host www3.sqlite.org:443 (Connection refused)

2020-01-25 Thread Richard Hipp
On 1/25/20, Richard Hipp  wrote:
> On 1/25/20, Domingo Alvarez Duarte  wrote:
>> Hello Richard !
>>
>> Since yesterday I'm getting this message when trying to use fossil for
>> sqlite3.
>
> Yeah.  That machine went completely bonkers and I had to rebuild it
> from scratch, using a new IP address.  And because it used a new IP
> address, I have to wait 24 hours for the new DNS information to
> propagate before LetsEncrypt will give me a new cert.

Both https://www3.sqlite.org/ and https://www3.fossil-scm.org/ should
be back up now.

-- 
D. Richard Hipp
d...@sqlite.org
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SSL: cannot connect to host www3.sqlite.org:443 (Connection refused)

2020-01-25 Thread Donald Griggs
And for anyone who might not be aware, there are official mirror servers
including

https://www.sqlite.org/cgi/src/doc/trunk/README.md
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] 64 bits version missing

2020-01-25 Thread Simon Slavin
On 23 Jan 2020, at 10:22pm, Evert van Dijken  wrote:

> The 64-bits DLL is missing from the download page,

"sqlite-dll-win64-x64-331.zip" works without problems for me.  Please try 
again, or tell us what other thing you're referring to.
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] CVE-2019-16168

2020-01-25 Thread Richard Hipp
On 1/24/20, Naumowicz, Ken E  wrote:
> Hello,
>
> I need to know if there is a security patch for this CVE on Windows Server
> 2012:
>
> Java SE Vulnerability CVE-2019-16168 Related to JavaFX (SQLite)   <<<===
> https://www.symantec.com/security-center/vulnerabilities/writeup/111496
>> NO UPDATE/PATCH FOUND at SQLite - SQLite Homepage
> (https://www.sqlite.org/)
>

I think this CVE must be referring to a bug that allows an attacker to
cause a divide-by-zero by modifying the schema and then injecting an
SQL query of their own choosing.  If so, that bug has been fixed in
the latest release.  In fact, all known bugs have been fixed in the
latest release.

On the other hand, I don't know of any mechanism on Windows Server
2012 by which an attacker can modify the schema of an SQLite database
and then inject arbitrary SQL.  So it is not clear to me that this is
really a vulnerability.

-- 
D. Richard Hipp
d...@sqlite.org
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] 64 bits version missing

2020-01-25 Thread Richard Hipp
On 1/23/20, Evert van Dijken  wrote:
> The 64-bits DLL is missing from the download page,

Which download page are you looking at?


-- 
D. Richard Hipp
d...@sqlite.org
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


[sqlite] CVE-2019-16168

2020-01-25 Thread Naumowicz, Ken E
Hello,

I need to know if there is a security patch for this CVE on Windows Server 2012:

Java SE Vulnerability CVE-2019-16168 Related to JavaFX (SQLite)   <<<=== 
https://www.symantec.com/security-center/vulnerabilities/writeup/111496
   > NO UPDATE/PATCH FOUND at SQLite - SQLite Homepage (https://www.sqlite.org/)

Thanks...

Ken Naumowicz
Sr. IT Application Consultant - EMS/SCADA Application Design and Engineering
WEC Energy Group - WEC Business Services (WBS)
office: 262-544-7239
email: ken.naumow...@wecenergygroup.com


___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


[sqlite] 64 bits version missing

2020-01-25 Thread Evert van Dijken

The 64-bits DLL is missing from the download page,

--
Evert van Dijken

___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] Sqlite 3.31.0 breaks firefox and thunderbird

2020-01-25 Thread Ferdinand
Thank you for the suggestion, Warren.

Bisect first pointed to commit df51ae19c1aa4c26, but sometime after that this 
segfault seemed to be fixed, a second bisect blamed commit 2ae77bd233570834:

https://www.sqlite.org/src/info/2ae77bd233570834

I've attached a backtrace from a crash at this commit.

Cheers,
Ferdinand
#0  0x7fffef25af20 in  () at /home/fw/nightly-latest/libxul.so
#1  0x7fffef2539f7 in  () at /home/fw/nightly-latest/libxul.so
#2  0x7fffea64478a in sqlite3OsOpen
(pVfs=0x7fffdb83c920, zPath=0x7fffd424dc18 
"/home/fw/.mozilla/firefox/s1jb1nj0.ephemeral/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-wal",
 pFile=0x7fffd43e49d0, flags=524294, pFlagsOut=0x7fffd3cdd63c) at 
sqlite3.c:22915
#3  0x7fffea6695cd in sqlite3WalOpen
(pVfs=0x7fffdb83c920, pDbFd=0x7fffd424d980, zWalName=0x7fffd424dc18 
"/home/fw/.mozilla/firefox/s1jb1nj0.ephemeral/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-wal",
 bNoShm=0, mxWalSize=-1, ppWal=0x7fffd424d928)
at sqlite3.c:60512
#4  0x7fffea667b4f in pagerOpenWal (pPager=0x7fffd424d800) at 
sqlite3.c:58926
#5  0x7fffea667cce in sqlite3PagerOpenWal (pPager=0x7fffd424d800, 
pbOpen=0x7fffd3cdd6d0) at sqlite3.c:58970
#6  0x7fffea674b3c in lockBtree (pBt=0x7fffd4f7d670) at sqlite3.c:67141
#7  0x7fffea67555b in sqlite3BtreeBeginTrans (p=0x7fffd425ff10, wrflag=0, 
pSchemaVersion=0x0) at sqlite3.c:67463
#8  0x7fffea6f0da8 in sqlite3InitOne (db=0x7fffd42e2c00, iDb=0, 
pzErrMsg=0x7fffd3cde9f8, mFlags=0)
at sqlite3.c:127048
#9  0x7fffea6f137d in sqlite3Init (db=0x7fffd42e2c00, 
pzErrMsg=0x7fffd3cde9f8) at sqlite3.c:127233
#10 0x7fffea6f14d5 in sqlite3ReadSchema (pParse=0x7fffd3cde9f0) at 
sqlite3.c:127259
#11 0x7fffea6eb165 in sqlite3Pragma
(pParse=0x7fffd3cde9f0, pId1=0x7fffd3cde038, pId2=0x7fffd3cde050, 
pValue=0x7fffd3cde080, minusFlag=1)
at sqlite3.c:124693
#12 0x7fffea72d1e7 in yy_reduce
(yypParser=0x7fffd3cddff0, yyruleno=242, yyLookahead=1, 
yyLookaheadToken=..., pParse=0x7fffd3cde9f0)
at sqlite3.c:156497
--Type  for more, q to quit, c to continue without paging--
#13 0x7fffea72e89a in sqlite3Parser (yyp=0x7fffd3cddff0, yymajor=1, 
yyminor=...) at sqlite3.c:157054
#14 0x7fffea72fda1 in sqlite3RunParser (pParse=0x7fffd3cde9f0, 
zSql=0x7fffd5add8d9 "", pzErrMsg=0x7fffd3cdeb98)
at sqlite3.c:158328
#15 0x7fffea6f1c44 in sqlite3Prepare
(db=0x7fffd42e2c00, zSql=0x7fffd5add888 "/* 
/home/fw/nightly/storage/mozStorageConnection.cpp */ PRAGMA cache_size = 
-2048", nBytes=-1, prepFlags=128, pReprepare=0x0, ppStmt=0x7fffd3cdecd8, 
pzTail=0x7fffd3cdece0) at sqlite3.c:127460
#16 0x7fffea6f1ebf in sqlite3LockAndPrepare
(db=0x7fffd42e2c00, zSql=0x7fffd5add888 "/* 
/home/fw/nightly/storage/mozStorageConnection.cpp */ PRAGMA cache_size = 
-2048", nBytes=-1, prepFlags=128, pOld=0x0, ppStmt=0x7fffd3cdecd8, 
pzTail=0x7fffd3cdece0) at sqlite3.c:127532
#17 0x7fffea6f2214 in sqlite3_prepare_v2
(db=0x7fffd42e2c00, zSql=0x7fffd5add888 "/* 
/home/fw/nightly/storage/mozStorageConnection.cpp */ PRAGMA cache_size = 
-2048", nBytes=-1, ppStmt=0x7fffd3cdecd8, pzTail=0x7fffd3cdece0) at 
sqlite3.c:127616
#18 0x7fffea6e957f in sqlite3_exec
(db=0x7fffd42e2c00, zSql=0x7fffd5add888 "/* 
/home/fw/nightly/storage/mozStorageConnection.cpp */ PRAGMA cache_size = 
-2048", xCallback=0x0, pArg=0x0, pzErrMsg=0x0) at sqlite3.c:121960
#19 0x7fffef24d86f in  () at /home/fw/nightly-latest/libxul.so

___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SSL: cannot connect to host www3.sqlite.org:443 (Connection refused)

2020-01-25 Thread Richard Hipp
On 1/25/20, Domingo Alvarez Duarte  wrote:
> Hello Richard !
>
> Since yesterday I'm getting this message when trying to use fossil for
> sqlite3.

Yeah.  That machine went completely bonkers and I had to rebuild it
from scratch, using a new IP address.  And because it used a new IP
address, I have to wait 24 hours for the new DNS information to
propagate before LetsEncrypt will give me a new cert.  The 24 hours
have now passed, but I have to be out of the office on some other
business.  I'll get the new cert installed and running as soon as I a
get a chance.  Patience,

-- 
D. Richard Hipp
d...@sqlite.org
___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users


[sqlite] SSL: cannot connect to host www3.sqlite.org:443 (Connection refused)

2020-01-25 Thread Domingo Alvarez Duarte

Hello Richard !

Since yesterday I'm getting this message when trying to use fossil for 
sqlite3.


Autosync:  https://www3.sqlite.org/cgi/src
SSL: cannot connect to host www3.sqlite.org:443 (Connection refused)

Cheers !

___
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users