SQLite

View Ticket
Login
Ticket Hash: 32b63d542433ca6757cd695aca42addf8ed67aa6
Title: Fuzzer induced crash
Status: Fixed Type: Code_Defect
Severity: Important Priority: Immediate
Subsystem: Unknown Resolution: Fixed
Last Modified: 2015-01-22 12:01:34
Version Found In: 3.8.8.1
User Comments:
drh added on 2015-01-22 11:41:40:

The following (incorrect) SQL text causes SQLite to segfault:

SELECT c.* FROM (a,b) AS c;

This problem was found by Michal Zalewski, presumably using his "american fuzzy lop" fuzzer tool, and reported on the SQLite mailing list. The bug appears to originate in check-in [99127a669c49f829] from 2013-01-03.