# 2014-01-20 # # The author disclaims copyright to this source code. In place of # a legal notice, here is a blessing: # # May you do good and not evil. # May you find forgiveness for yourself and forgive others. # May you share freely, never taking more than you give. # #*********************************************************************** # set testdir [file dirname $argv0] source $testdir/tester.tcl set testprefix corruptH # Do not use a codec for tests in this file, as the database file is # manipulated directly using tcl scripts (using the [hexio_write] command). # do_not_use_codec database_may_be_corrupt # The corruption migrations tested by the code in this file are not detected # mmap mode. # # The reason is that in mmap mode, the different queries may use different # PgHdr objects for the same page (same data, but different PgHdr container # objects). And so the corruption is not detected. # if {[permutation]=="mmap"} { finish_test return } # Initialize the database. # do_execsql_test 1.1 { PRAGMA page_size=1024; CREATE TABLE t1(a INTEGER PRIMARY KEY, b); INSERT INTO t1 VALUES(1, 'one'); INSERT INTO t1 VALUES(2, 'two'); CREATE TABLE t2(x); INSERT INTO t2 VALUES(randomblob(200)); INSERT INTO t2 SELECT randomblob(200) FROM t2; INSERT INTO t2 SELECT randomblob(200) FROM t2; INSERT INTO t2 SELECT randomblob(200) FROM t2; INSERT INTO t2 SELECT randomblob(200) FROM t2; INSERT INTO t2 SELECT randomblob(200) FROM t2; INSERT INTO t2 SELECT randomblob(200) FROM t2; } {} # Corrupt the file so that the root page of t1 is also linked into t2 as # a leaf page. # do_test 1.2 { db eval { SELECT name, rootpage FROM sqlite_master } { set r($name) $rootpage } db close hexio_write test.db [expr {($r(t2)-1)*1024 + 11}] [format %.2X $r(t1)] sqlite3 db test.db } {} do_test 1.3 { breakpoint db eval { PRAGMA secure_delete=1 } list [catch { db eval { SELECT * FROM t1 WHERE a IN (1, 2) } { db eval { DELETE FROM t2 } } } msg] $msg } {1 {database disk image is malformed}} #------------------------------------------------------------------------- reset_db # Initialize the database. # do_execsql_test 2.1 { PRAGMA auto_vacuum=0; PRAGMA page_size=1024; CREATE TABLE t1(a INTEGER PRIMARY KEY, b); INSERT INTO t1 VALUES(1, 'one'); INSERT INTO t1 VALUES(2, 'two'); CREATE TABLE t3(x); CREATE TABLE t2(x PRIMARY KEY) WITHOUT ROWID; INSERT INTO t2 VALUES(randomblob(100)); DROP TABLE t3; } {} do_test 2.2 { db eval { SELECT name, rootpage FROM sqlite_master } { set r($name) $rootpage } db close set fl [hexio_get_int [hexio_read test.db 32 4]] hexio_write test.db [expr {($fl-1) * 1024 + 0}] 00000000 hexio_write test.db [expr {($fl-1) * 1024 + 4}] 00000001 hexio_write test.db [expr {($fl-1) * 1024 + 8}] [format %.8X $r(t1)] hexio_write test.db 36 00000002 sqlite3 db test.db } {} # The trick here is that the root page of the tree scanned by the outer # query is also currently on the free-list. So while the first seek on # the table (for a==1) works, by the time the second is attempted The # "INSERT INTO t2..." statements have recycled the root page of t1 and # used it as an index leaf. Normally, BtreeMovetoUnpacked() detects # that the PgHdr object associated with said root page does not match # the cursor (as it is now marked with PgHdr.intKey==0) and returns # SQLITE_CORRUPT. # set res23 {1 {database disk image is malformed}} do_test 2.3 { list [catch { set res [list] db eval { SELECT * FROM t1 WHERE a IN (1, 2) } { db eval { INSERT INTO t2 SELECT randomblob(100) FROM t2; INSERT INTO t2 SELECT randomblob(100) FROM t2; INSERT INTO t2 SELECT randomblob(100) FROM t2; INSERT INTO t2 SELECT randomblob(100) FROM t2; INSERT INTO t2 SELECT randomblob(100) FROM t2; } lappend res $b } set res } msg] $msg } $res23 #------------------------------------------------------------------------- reset_db # Initialize the database. # do_execsql_test 3.1 { PRAGMA page_size=1024; CREATE TABLE t1(a INTEGER PRIMARY KEY, b); INSERT INTO t1 VALUES(1, 'one'); INSERT INTO t1 VALUES(2, 'two'); CREATE TABLE t2(c INTEGER PRAGMA KEY, d); INSERT INTO t2 VALUES(1, randomblob(1100)); } {} do_test 3.2 { db eval { SELECT name, rootpage FROM sqlite_master } { set r($name) $rootpage } db close hexio_write test.db [expr {($r(t2)-1) * 1024 + 1020}] 00000002 sqlite3 db test.db } {} do_test 3.3 { list [catch { db eval { SELECT * FROM t1 WHERE a IN (1, 2) } { db eval { DELETE FROM t2 WHERE c=1; } } } msg] $msg } {1 {database disk image is malformed}} finish_test