paulhorn/sqlite
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert sqlite3_enable_load_extension() to its original long-standing behavior.

Browse Source 
Add SQLITE_DBCONFIG_ENABLE_LOAD_EXTENSION which will enable only the C-API and
leave the SQL function disabled.

FossilOrigin-Name: b2ae5bfa32e608625bd177907596df3dbc2212e1
This commit is contained in:
drh
2016-04-21 01:30:09 +00:00
parent 1a55dedf7b
commit 191dd06195
8 changed files with 81 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/func.c
+2 -5
View File
@@ -1386,13 +1386,10 @@ static void loadExt(sqlite3_context *context, int argc, sqlite3_value **argv){
sqlite3 *db = sqlite3_context_db_handle(context);
char *zErrMsg = 0;
/* Disallow the load_extension function unless the SQLITE_LoadExtension
/* Disallow the load_extension() SQL function unless the SQLITE_LoadExtFunc
** flag is set. See the sqlite3_enable_load_extension() API.
*/
if( (db->flags & SQLITE_LoadExtension)==0 ){
sqlite3_result_error(context, "not authorized", -1);
return;
}
if( (db->flags & SQLITE_LoadExtFunc)==0 ) return;
if( argc==2 ){
zProc = (const char *)sqlite3_value_text(argv[1]);