On 11/13/18, Hegde, Deepakakumar (D.) <deep...@allgosystems.com> wrote: > Hi All, > > > We are facing a problem in which sqlite library function > sqlite3DbMallocRawNN() is getting crashed inside the sqlite3_prepare_v2() > function to prepare the statement.
This sort of thing is almost always the result of heap corruption occurring elsewhere in your system. It is not a problem with SQLite, but rather SQLite just happened to be the unlucky component to stumble over the corrupted heap left behind by some other component. Are you able to run your application using ASAN or Valgrind? That will usually pinpoint the problem pretty quickly. > > > As per the analysis "n" value input to this seems to have a big value > causing the crash. checked the input value to sqlite3_prepare_v2() and this > seems fine. input query statement is well within the max size allocated for > the buffer. > > > Sqlite version in use: 3.16.1 > > > Checked the internet for this specific function crash and can see some > reported this. but could not find any solution particular to this. Please > can I know is this issue is reported before and is there any counter measure > any any of the higher version? > > > Also it will be helpful anyone point out any error in the input causing this > issue. > > Also this issue is seen only once and not able to see the issue again. > > > coredump back trace: > > (gdb) bt > #0 sqlite3DbMallocRawNN (db=db@entry=0x1dea20, n=176093659143) at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:24732 > #1 0xa49ad05a in sqlite3DbStrNDup (db=db@entry=0x1dea20, > z=0x26c981 > "SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM VIDEO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM IMAGE UNION SELECT ID,SORTID,NAME,OBJECT_FORMAT,8 AS CONTENT_TYPE > ,STRFRMT,PPID,3 as is_invalid,0 AS FILESIZE FROM PLAYLIST) AS TEMP WHERE > Content_Type &1 AND PPID=2", n=<optimized out>) > at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:24834 > #2 0xa49eceba in sqlite3ExprListSetSpan (pParse=<optimized out>, > pSpan=<optimized out>, pSpan=<optimized out>, pList=<optimized out>) > at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:91967 > #3 yy_reduce (yyruleno=92, yypParser=0xa0de4b00) at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:5598 > #4 sqlite3Parser (pParse=<optimized out>, yyminor=..., yymajor=7, > yymajor@entry=-1596044280, yyp=<optimized out>) > at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:6592 > #5 sqlite3RunParser (pParse=pParse@entry=0x9d3fdce4, > zSql=zSql@entry=0x26c8f8 "SELECT COUNT(TEMP.ID) FROM (SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM AUDIO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM VIDEO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM IMAGE UNION SELECT ID,SORTID,NAME,OBJECT_FORMAT,8 AS CONTENT_TYPE > ,STRFRMT,PPID,3 as is_invalid,0 AS FILESIZE FROM PLAYLIST) AS TEMP WHERE > Content_Type &1 AND PPID=2", pzErrMsg=pzErrMsg@entry=0x9d3fdcdc) > at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:7538 > #6 0xa49f08cc in sqlite3Prepare (db=db@entry=0x1dea20, > zSql=zSql@entry=0x26c8f8 "SELECT COUNT(TEMP.ID) FROM (SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM AUDIO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM VIDEO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM IMAGE UNION SELECT ID,SORTID,NAME,OBJECT_FORMAT,8 AS CONTENT_TYPE > ,STRFRMT,PPID,3 as is_invalid,0 AS FILESIZE FROM PLAYLIST) AS TEMP WHERE > Content_Type &1 AND PPID=2", nBytes=nBytes@entry=-1, > saveSqlFlag=saveSqlFlag@entry=1, pReprepare=pReprepare@entry=0x0, > ppStmt=ppStmt@entry=0x25cf00, pzTail=pzTail@entry=0x0) at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:115300 > #7 0xa49f0bee in sqlite3LockAndPrepare (db=0x1dea20, > zSql=0x26c8f8 "SELECT COUNT(TEMP.ID) FROM (SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM AUDIO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM VIDEO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM IMAGE UNION SELECT ID,SORTID,NAME,OBJECT_FORMAT,8 AS CONTENT_TYPE > ,STRFRMT,PPID,3 as is_invalid,0 AS FILESIZE FROM PLAYLIST) AS TEMP WHERE > Content_Type &1 AND PPID=2", nBytes=-1, saveSqlFlag=1, pOld=0x0, > ppStmt=0x25cf00, pzTail=0x0) > at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:115391 > #8 0xa49f0db4 in sqlite3_prepare_v2 (db=db@entry=0x1dea20, > zSql=zSql@entry=0x26c8f8 "SELECT COUNT(TEMP.ID) FROM (SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM AUDIO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM VIDEO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM IMAGE UNION SELECT ID,SORTID,NAME,OBJECT_FORMAT,8 AS CONTENT_TYPE > ,STRFRMT,PPID,3 as is_invalid,0 AS FILESIZE FROM PLAYLIST) AS TEMP WHERE > Content_Type &1 AND PPID=2", nBytes=nBytes@entry=-1, > ppStmt=ppStmt@entry=0x25cf00, pzTail=pzTail@entry=0x0) > at > /workspace/workspace/Trigger-Build-Host_Job/host/yunos6.0/third_party/sqlite/sqlite3.c:115467 > #9 0xa4114462 in dbm_sqlite_get_integer_value > (psSqlite=psSqlite@entry=0x25cefc, > pcQuery=pcQuery@entry=0x26c8f8 "SELECT COUNT(TEMP.ID) FROM (SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM AUDIO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM VIDEO UNION SELECT > ID,SORTID,NAME,Object_Format,Content_Type,STRFRMT,PPID,is_invalid,FILESIZE > FROM IMAGE UNION SELECT ID,SORTID,NAME,OBJECT_FORMAT,8 AS CONTENT_TYPE > ,STRFRMT,PPID,3 as is_invalid,0 AS FILESIZE FROM PLAYLIST) AS TEMP WHERE > Content_Type &1 AND PPID=2", puiReturnCount=puiReturnCount@entry=0x26e100) > at src/race_dbm_common.c:5044 > #10 0xa42364fa in race_dbm_query_get_num_entries (uiDBMHandle=2477816, > uiQueryHandle=2539768, puiNumEntries=0x9d3fe838) at > src/race_dbm_interface.c:10289 > #11 0xa4005914 in race_bfw_get_num_folder_contents (uiBrowserHandle=1567856, > uiBrowseSessionHandle=uiBrowseSessionHandle@entry=4, > uiBrowseFolderHandle=uiBrowseFolderHandle@entry=0, > puiNumContents=puiNumContents@entry=0x9d3feba4) at > src/race_bfw_interface.c:5147 > #12 0xa48c4066 in race_get_num_entries (raceHandle=1485896, brwSessionId=4, > puiNumEntries=0x9d3feba4) at src/race_browser_interface.c:2122 > #13 0x000e0a08 in NMedia::CHandleManager::getMediaConetxt (this=0x15dab4 > <NMedia::CHandleManager::instance()::manager>, session_id=383103612, > context=0x9d3fec00, ret_list=0x9d3febf4, count=0x0) > at > /home/jenkins-build/workspace/0EP21_SOP_Compile/ZXQ/workspace/multimedia/common/source/common/CHandleManager.cpp:851 > #14 0x0011c86c in NMedia::CMMEWrapper::importPlayListWrapper (this=0x336eb8, > browseid=383103612, list_category=..., attach=false, play=false, > start_index=0, start_time=0) > at > /home/jenkins-build/workspace/0EP21_SOP_Compile/ZXQ/workspace/multimedia/common/source/player/CMMEWrapper.cpp:2617 > #15 0x000f8dbc in NMedia::CMediaPlayer::importPlayListWork (this=0x329c70, > worker=0x32ecd8, job=0x497c88) > at > /home/jenkins-build/workspace/0EP21_SOP_Compile/ZXQ/workspace/multimedia/common/source/player/CMediaPlayer.cpp:452 > #16 0x0010a848 in CMethodJob<NMedia::CMediaPlayer>::run (this=0x497c88, > worker=0x32ecd8) at > /home/jenkins-build/workspace/0EP21_SOP_Compile/ZXQ/project/projroot/j6p/usr/include/common_base/CMethodJob.h:57 > #17 0x00127224 in CBaseWorker::processJobQueue() () > > > > > Thanks and Regards > > Deepak > _______________________________________________ > sqlite-users mailing list > sqlite-users@mailinglists.sqlite.org > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users > -- D. Richard Hipp d...@sqlite.org _______________________________________________ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
