mirror of
https://git.yoctoproject.org/poky
synced 2026-10-22 19:18:18 +00:00
Deepak Rathore
f1d5865685
This patch applies the upstream fix [1], which addresses memory corruption vulnerabilities in the SQLite FTS5 full-text search extension. The GitHub mirror commit [1] corresponds to the SQLite Fossil check-in shown in [2]. [1] https://github.com/sqlite/sqlite/commit/e0b995b2a62b78979eb65bb8dadfa912eaa8e62f [2] https://sqlite.org/src/info/061febcf41ca Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-11822 https://nvd.nist.gov/vuln/detail/CVE-2026-11824 (From OE-Core rev: 3de44d1dd09907f620ed349dba563c489a5cecb9) Signed-off-by: Deepak Rathore <deeratho@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
42 lines
1.5 KiB
Diff
42 lines
1.5 KiB
Diff
From ceece94b0040125a12192f6f23b1ec413871b04c Mon Sep 17 00:00:00 2001
|
|
From: drh <>
|
|
Date: Mon, 11 May 2026 12:00:19 +0000
|
|
Subject: [PATCH] Fix potential buffer overwrite that could occur in fts5 when
|
|
processing corrupt records.
|
|
|
|
FossilOrigin-Name: 061febcf41ca4872a0f407951e1507209daca7895122b909a7806c60b6e200c4
|
|
|
|
CVE: CVE-2026-11822 CVE-2026-11824
|
|
Upstream-Status: Backport [https://github.com/sqlite/sqlite/commit/e0b995b2a62b78979eb65bb8dadfa912eaa8e62f]
|
|
|
|
Backport Changes:
|
|
- Applied the upstream fts5LeafRead() fix from ext/fts5/fts5_index.c
|
|
to sqlite3.c because the Yocto sqlite-autoconf source uses the
|
|
amalgamated SQLite layout.
|
|
- Omitted ext/fts5/test/fts5corruptA.test because this extracted
|
|
recipe source contains the SQLite autoconf/amalgamation layout and
|
|
does not carry the upstream Tcl test tree.
|
|
- Omitted Git mirror metadata files manifest and manifest.uuid because
|
|
they are not required for the security fix in this source layout.
|
|
|
|
Signed-off-by: Deepak Rathore <deeratho@cisco.com>
|
|
---
|
|
sqlite3.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/sqlite3.c b/sqlite3.c
|
|
index fb42adcd7..6acf46a5b 100644
|
|
--- a/sqlite3.c
|
|
+++ b/sqlite3.c
|
|
@@ -239694,7 +239694,7 @@ static void fts5DataRelease(Fts5Data *pData){
|
|
static Fts5Data *fts5LeafRead(Fts5Index *p, i64 iRowid){
|
|
Fts5Data *pRet = fts5DataRead(p, iRowid);
|
|
if( pRet ){
|
|
- if( pRet->nn<4 || pRet->szLeaf>pRet->nn ){
|
|
+ if( pRet->szLeaf<4 || pRet->szLeaf>pRet->nn ){
|
|
p->rc = FTS5_CORRUPT;
|
|
fts5DataRelease(pRet);
|
|
pRet = 0;
|
|
--
|
|
2.51.0
|