Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick d7feae867b83 from sqlite #36085

Merged
merged 2 commits into from Oct 24, 2022

Conversation

ppontes
Copy link
Member

@ppontes ppontes commented Oct 19, 2022

[M102-LTS] Enhance defensive mode so that it disallows CREATE TRIGGER statements if
the statements within the trigger attempt to write on a shadow table. Also
make the legacy FTS3 code more robust against integer overflow during
memory allocation.

Bug: 1368076
FossilOrigin-Name: c41f25e6f3591e575452c4c68f8072a0163cc00d80af31f90d407c7deca79622
(cherry picked from commit 3ec786ab9cfa213525ecc18b326aeb18ab842f7d)
Change-Id: I3b2cbf7c04f1873a6001d577feefaa8abd9f2a7d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/deps/sqlite/+/3933554
Reviewed-by: Ayu Ishii <ayui@chromium.org>

Release Notes

Notes: Security: backported fix for 1368076.

@ppontes ppontes added security 🔒 semver/patch backwards-compatible bug fixes backport-check-skip Skip trop's backport validity checking 20-x-y labels Oct 19, 2022
@ppontes ppontes requested review from a team as code owners October 19, 2022 21:32
@ppontes ppontes force-pushed the cherry-pick/20-x-y/sqlite/d7feae867b83 branch from 6026753 to 3756275 Compare October 23, 2022 00:42
@jkleinsc
Copy link
Contributor

Merging as CI failure unrelated to PR change.

@jkleinsc jkleinsc merged commit 2e85e7f into 20-x-y Oct 24, 2022
@jkleinsc jkleinsc deleted the cherry-pick/20-x-y/sqlite/d7feae867b83 branch October 24, 2022 19:05
@release-clerk
Copy link

release-clerk bot commented Oct 24, 2022

Release Notes Persisted

Security: backported fix for 1368076.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
20-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants