sqlite/sqlite-cve-2025-3277.patch
Ales Nezbeda 4bdbfe7583 CVE-2025-3277 Integer overflow
Fix tests, gating and rpminspect

Resolves: RHEL-87295
2025-04-15 15:59:15 +02:00

19 lines
391 B
Diff

Index: src/func.c
==================================================================
--- /src/func.c
+++ /src/func.c
@@ -1568,11 +1568,11 @@
int i;
char *z;
for(i=0; i<argc; i++){
n += sqlite3_value_bytes(argv[i]);
}
- n += (argc-1)*nSep;
+ n += (argc-1)*(i64)nSep;
z = sqlite3_malloc64(n+1);
if( z==0 ){
sqlite3_result_error_nomem(context);
return;
}