Skip to content

Conversation

@ppontes
Copy link
Member

@ppontes ppontes commented Oct 19, 2022

[M102-LTS] Enhance defensive mode so that it disallows CREATE TRIGGER statements if
the statements within the trigger attempt to write on a shadow table. Also
make the legacy FTS3 code more robust against integer overflow during
memory allocation.

Bug: 1368076
FossilOrigin-Name: c41f25e6f3591e575452c4c68f8072a0163cc00d80af31f90d407c7deca79622
(cherry picked from commit 3ec786ab9cfa213525ecc18b326aeb18ab842f7d)
Change-Id: I3b2cbf7c04f1873a6001d577feefaa8abd9f2a7d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/deps/sqlite/+/3933554
Reviewed-by: Ayu Ishii <ayui@chromium.org>

Release Notes

Notes: Security: backported fix for 1368076.

@ppontes ppontes added security 🔒 semver/patch backwards-compatible bug fixes backport-check-skip Skip trop's backport validity checking 20-x-y labels Oct 19, 2022
@ppontes ppontes requested review from a team as code owners October 19, 2022 21:32
@ppontes ppontes force-pushed the cherry-pick/20-x-y/sqlite/d7feae867b83 branch from 6026753 to 3756275 Compare October 23, 2022 00:42
@jkleinsc
Copy link
Member

Merging as CI failure unrelated to PR change.

@jkleinsc jkleinsc merged commit 2e85e7f into 20-x-y Oct 24, 2022
@jkleinsc jkleinsc deleted the cherry-pick/20-x-y/sqlite/d7feae867b83 branch October 24, 2022 19:05
@release-clerk
Copy link

release-clerk bot commented Oct 24, 2022

Release Notes Persisted

Security: backported fix for 1368076.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

20-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants