Hi all,

I found a stack overflow issue in fts4 module, which is in 
`sqlite-snapshot-201911192122.tar.gz` version.

bt:
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff6e5130e in _int_malloc (av=av@entry=0x7ffff71a8c40 <main_arena>, 
bytes=bytes@entry=1032) at malloc.c:3557
3557    in malloc.c
#0  0x00007ffff6e5130e in _int_malloc (av=av@entry=0x7ffff71a8c40 <main_arena>, 
bytes=bytes@entry=1032) at malloc.c:3557
#1  0x00007ffff6e540fc in __GI___libc_malloc (bytes=1032) at malloc.c:3057
#2  0x0000555555596210 in sqlite3MemMalloc (nByte=1024) at ../sqlite3.c:23169
#3  0x00005555555974b3 in mallocWithAlarm (n=1024, pp=0x7fffff7ff0f0) at 
../sqlite3.c:27050
#4  0x000055555559755b in sqlite3Malloc (n=1024) at ../sqlite3.c:27080
#5  0x0000555555597cb2 in dbMallocRawFinish (db=0x555555999b78, n=1024) at 
../sqlite3.c:27311
#6  0x0000555555597dea in sqlite3DbMallocRawNN (db=0x555555999b78, n=1024) at 
../sqlite3.c:27355
#7  0x0000555555597f1f in sqlite3DbRealloc (db=0x555555999b78, p=0x0, n=1024) 
at ../sqlite3.c:27389
#8  0x00005555555e0139 in growOpArray (v=0x555556236098, nOp=1) at 
../sqlite3.c:76974
#9  0x00005555555e021c in growOp3 (p=0x555556236098, op=61, p1=0, p2=1, p3=0) 
at ../sqlite3.c:77012
#10 0x00005555555e0326 in sqlite3VdbeAddOp3 (p=0x555556236098, op=61, p1=0, 
p2=1, p3=0) at ../sqlite3.c:77024
#11 0x00005555555e0490 in sqlite3VdbeAddOp2 (p=0x555556236098, op=61, p1=0, 
p2=1) at ../sqlite3.c:77060
#12 0x00005555555dfc76 in sqlite3VdbeCreate (pParse=0x7fffff8001e0) at 
../sqlite3.c:76834
#13 0x000055555564d00c in sqlite3GetVdbe (pParse=0x7fffff8001e0) at 
../sqlite3.c:128723
#14 0x0000555555655875 in sqlite3Select (pParse=0x7fffff8001e0, 
p=0x555556236008, pDest=0x7fffff7ff6a0) at ../sqlite3.c:132283
#15 0x0000555555682002 in yy_reduce (yypParser=0x7fffff7ff7e0, yyruleno=82, 
yyLookahead=1, yyLookaheadToken=..., pParse=0x7fffff8001e0) at 
../sqlite3.c:154326
#16 0x0000555555686d52 in sqlite3Parser (yyp=0x7fffff7ff7e0, yymajor=1, 
yyminor=...) at ../sqlite3.c:155620
#17 0x0000555555688376 in sqlite3RunParser (pParse=0x7fffff8001e0, 
zSql=0x5555559bec74 "", pzErrMsg=0x7fffff8001b8) at ../sqlite3.c:156894#18 
0x00005555556481de in sqlite3Prepare (db=0x555555999b78, zSql=0x5555559bec38 
"SELECT rowid, x.'0' FROM 'main'.'t0' AS x ORDER BY rowid ASC", nBytes=-1, 
prepFlags=129, pReprepare=0x0, ppStmt=0x555556235708, pzTail=0x0) at 
../sqlite3.c:126307
...
...


Best regards,
Xingwei Lin of Ant-financial Light-Year Security Lab

_______________________________________________
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to