Thanks for the report. The first bullet is not possible because of [this line][1] that forces p->pSrc to be NULL if pSub is NULL. Similarly the second bullet is not possible because the test of db->mallocFailed down inside of sqlite3DbMallocRawNN() causes pEq to be NULL if pE2 is NULL. [1]: src:/file?ln=602&ci=8c4b1482eeb31856&name=src%2Fmalloc.c So, neither of these cases are actual problems. No action required. Edit: See also [check-in 83a83475c5064ea6][2]. [2]: src:/info/83a83475c5064ea6