Many hyperlinks are disabled.
Use anonymous login
to enable hyperlinks.
Overview
| Comment: | Do not return too many bytes from the zipfile extension given a malformed ZIP file. CVE-2025-70873. |
|---|---|
| Downloads: | See separate download page |
| Timelines: | family | ancestors | descendants | path-to-release | both | trunk |
| Files: | files | file ages | folders |
| SHA3-256: | 9766b47beb9ec72f55bfe9fa6e4dadf1 829848389388aa30e97094a325de17fa |
| User & Date: | drh 2025-12-06 23:58:09.413 |
| Original Comment: | Do not return too many bytes from the zipfile extension given a malformed ZIP file. |
Context
|
2025-12-07 | ||
| 18:19 | Minor tweaks to the QRF documentation. No changes to code. (check-in: b2517d01e6 ... user: drh tags: trunk) | |
|
2025-12-06 | ||
| 23:58 | Do not return too many bytes from the zipfile extension given a malformed ZIP file. CVE-2025-70873. (check-in: 9766b47beb ... user: drh tags: trunk) | |
| 20:41 | In the zipfile extension, only return as many bytes as Inflate actually generated. Forum post 761eac3c82. Adjust ./configure so that it builds zipfile into testfixture if ZLIB is available, so that tests get run on unix platforms. (closed check-in: 3d459f1fb1 ... user: drh tags: zipfile-fix) | |
| 19:56 | Remove #ifdefs intended to make SQLite compatible with Windows RT. WinRT was short-lived and has been discontinued for a long time. (check-in: 108691a3cb ... user: drh tags: trunk) | |
Changes
Changes to autosetup/sqlite-config.tcl.
Changes to ext/misc/zipfile.c.