On 11/25/19, OBones wrote:
> Maybe I'm completely wrong, but using t0 both as the name of the virtual
> table and the source for its content seems to me like the perfect
> condition to create a infinite recursion.
You are exactly correct in diagnosing the problem. This is an attack
that we
林性伟(林以) wrote:
Hi,
Sorry to make you inconvenient.
poc, test.sql:
CREATE VIRTUAL TABLE t0 USING fts4(content=t0,0);
SELECT count() FROM t0(0);
Maybe I'm completely wrong, but using t0 both as the name of the virtual
table and the source for its content seems to me like the perfect
condition
Hi,
Sorry to make you inconvenient.
poc, test.sql:
CREATE VIRTUAL TABLE t0 USING fts4(content=t0,0);
SELECT count() FROM t0(0);
Full asan bt:
$ ./sqlite3
SQLite version 3.31.0 2019-11-19 21:22:16
Enter ".help" for usage hints.
Connected to a transient in-memory database.
Use ".open FILENAME" to
3 matches
Mail list logo