In extensions rtree, fts3 and fts5, ensure that when dynamic buffers are bound

to persistent SQL statements using SQLITE_STATIC, the binding is replaced with
an SQL NULL before the buffer is freed. Otherwise, a user may obtain a pointer
to the persistent statement using sqlite3_next_stmt() and attempt to access
the freed buffer using sqlite3_expanded_sql() or similar.

FossilOrigin-Name: 2a5f813bc61f9e780f2ccbda425611f65ad523b6d486a1e5e2b9d5e9f1d260a2

This commit is contained in:

dan

2018-02-07 18:02:50 +00:00

parent fa68815fa3

commit eab0e10304

14 changed files with 47 additions and 20 deletions

ext/rtree/rtree1.test

View File

@@ -609,4 +609,5 @@ do_execsql_test 15.2 {
   COMMIT;
 }
 expand_all_sql db
 finish_test