Hi,

According to the documentation at https://sqlite.org/appfunc.html#security_implications, application-defined functions cannot be used in CHECK constraints within a table definition under the untrusted schema. However, the following Java code executes successfully without any errors with sqlite-jdbc-3.47.2.0.jar.

In this code, I create a non-deterministic function adf, which just return 1.

import org.sqlite.Function;
import java.sql.*;

public class test {
    public static void main(String[] args) {
        try {
            String cmd = "rm ./test.db";
            Runtime.getRuntime().exec(cmd);
        } catch (Exception e) {
            e.printStackTrace();
        }
        try (Connection conn = DriverManager.getConnection("jdbc:sqlite:test.db")) {
            Adf.create(conn);

            Statement stmt = conn.createStatement();
            stmt.execute("PRAGMA trusted_schema=OFF;");
            stmt.execute("CREATE TABLE t1(c0 TEXT CHECK(adf()));");
            stmt.execute("INSERT OR IGNORE INTO t1(c0) VALUES(1);");
            ResultSet rs = stmt.executeQuery("SELECT c0 FROM t1");

            while (rs.next()) {
                System.out.println("Results: " + rs.getString("c0"));
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
    }

}

public class Adf extends Function {
    @Override
    protected void xFunc() throws SQLException {
        StringBuilder output = new StringBuilder();
        result("1");
    }

    public static void create(Connection conn) throws Exception {
        // Function.create(conn, "adf", new Adf(), 0x800);
        Function.create(conn, "adf", new Adf());
    }
}

If I create the function as a deterministic function with 0x800, then this code can trigger the fellowing error, which is expected:

org.sqlite.SQLiteException: [SQLITE_ERROR] SQL error or missing database (unsafe use of adf())
        at org.sqlite.core.DB.newSQLException(DB.java:1179)
        at org.sqlite.core.DB.newSQLException(DB.java:1190)
        at org.sqlite.core.DB.throwex(DB.java:1150)
        at org.sqlite.core.NativeDB.prepare_utf8(Native Method)
        at org.sqlite.core.NativeDB.prepare(NativeDB.java:135)
        at org.sqlite.core.DB.prepare(DB.java:264)
        at org.sqlite.jdbc3.JDBC3Statement.lambda$execute$0(JDBC3Statement.java:55)
        at org.sqlite.jdbc3.JDBC3Statement.withConnectionTimeout(JDBC3Statement.java:458)
        at org.sqlite.jdbc3.JDBC3Statement.execute(JDBC3Statement.java:44)
        at test.main(test.java:19)
        at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
        at java.base/java.lang.reflect.Method.invoke(Method.java:580)
        at jdk.compiler/com.sun.tools.javac.launcher.Main.execute(Main.java:484)
        at jdk.compiler/com.sun.tools.javac.launcher.Main.run(Main.java:208)
        at jdk.compiler/com.sun.tools.javac.launcher.Main.main(Main.java:135)

I believe that neither deterministic nor non-deterministic functions should be allowed in CHECK constraints. Am I misunderstanding this?