sqlite.org

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview

Comment:Harden the SQLITE_DBCONFIG_LOOKASIDE interface against misuse, such as described in forum post 48f365daec, CVE-2025-29088, and CVE-2025-52099. Enhancements to the SQLITE_DBCONFIG_LOOKASIDE documentation. Test cases in TH3.
Downloads: See separate download page
Timelines: family | ancestors | descendants | path-to-release | both | trunk
Files: files | file ages | folders
SHA3-256: 1ec4c308c76c69fba031184254fc3340 f07607cfbf8342b13713ab445563d377
User & Date: drh 2025-02-17 14:16:49.747
Original Comment: Harden the SQLITE_DBCONFIG_LOOKASIDE interface against misuse, such as described in forum post 48f365daec. Enhancements to the SQLITE_DBCONFIG_LOOKASIDE documentation. Test cases in TH3.

References

2025-02-17

14:27 Harden the SQLITE_DBCONFIG_LOOKASIDE interface against misuse. This is a simplification of [1ec4c308c76c69fb] appropriate for use in a patch release. (check-in: 78c4994c1c ... user: drh tags: branch-3.49)

Context

2025-02-17

16:04 Replace TEXE (legacy name) with T.exe (3.48+ name) in two places in makefiles. This fixes distclean of jimsh.exe in the canonical build in non-native Windows environments. (check-in: edb8a78c02 ... user: stephan tags: trunk)
14:16 Harden the SQLITE_DBCONFIG_LOOKASIDE interface against misuse, such as described in forum post 48f365daec, CVE-2025-29088, and CVE-2025-52099. Enhancements to the SQLITE_DBCONFIG_LOOKASIDE documentation. Test cases in TH3. (check-in: 1ec4c308c7 ... user: drh tags: trunk)
10:58 Fix a typo (a missing ")") in a comment that is used to generate documentation. No changes to code. (check-in: ea21685658 ... user: drh tags: trunk)

Changes

Changes to src/main.c.

Changes to src/sqlite.h.in.

Read the original on sqlite.org ↗