Octopus ZHANG, on Friday, December 6, 2019 06:18 AM, wrote... > > Hi all, > > I'm trying to fuzz sqlite, and I found the following query was executed for > more than one minute. (./sqlite3, on > > >> SELECT > printf('%*.*c',90000||006000000&6600000000,1000000000000003)""WHERE""/""; > > I also turned on the timer, but no time was printed. So I used `time` to > record: > +------+-----------+ > | real | 1m38.036s | > | user | 1m36.086s | > | sys | 0m1.948s | > +------+-----------+
> Here is how to reproduce: > OS: Linux 18.04.3 LTS, 4.15.0-65-generic > SQLite version 3.30.1 2019-10-10 20:19:45 (used default command to build) I actually ran out of memory... 8:18:59.35>sqlite3 SQLite version 3.30.0 2019-10-04 15:03:17 Enter ".help" for usage hints. Connected to a transient in-memory database. Use ".open FILENAME" to reopen on a persistent database. sqlite> .timer on sqlite> SELECT ...> printf('%*.*c',90000||006000000&6600000000,1000000000000003)""WHERE""/""; Run Time: real 12.191 user 11.296875 sys 0.796875 Error: out of memory sqlite> josé _______________________________________________ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users