Code:
 
BEGIN;
CREATE TABLE t1(a);
ALTER TABLE t1 ADD c CHECK (b>c);
PRAGMA writable_schema=on;
INSERT INTO t1 VALUES(2,3);
 
Version: 3.29.0, 3.22.0 
 
Hello, we are students from Korea.
We learned about fuzzing and tried to fuzz on sqlite3, and we found a piece of 
code which makes crash. 
 
When we try to insert values, segmentation fault occured.
 
So, we tried to analyze the reason and we found that the program consider b as 
tk_id, not a column.
Thus, when we try to insert the value, the program try to access 
"pEList->nExpr"(sqlite3.c:101266) whose value is NULL.
 
If we change b>c into c>b in the third line, b is considered as column. So, we 
think there is a problem when unknown variable appears first in constraint 
statement.
 
Please check about this. Thank you! 
_______________________________________________
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to