diff options
| author | drh <drh@noemail.net> | 2018-04-11 16:04:01 +0000 |
|---|---|---|
| committer | drh <drh@noemail.net> | 2018-04-11 16:04:01 +0000 |
| commit | 84fbff18d0f9df6086c9cfdeaab468c1f06f141c (patch) | |
| tree | 544d16089d91b4b7e45862f5efae337bf5eab869 /src/attach.c | |
| parent | d6189eafa4d0290f644819f091a2138ce8d2f647 (diff) | |
| download | sqlite-84fbff18d0f9df6086c9cfdeaab468c1f06f141c.tar.gz sqlite-84fbff18d0f9df6086c9cfdeaab468c1f06f141c.zip | |
Prohibit bound parameters in the arguments to table-valued functions within
a trigger. Problem discovered by OSSFuzz.
FossilOrigin-Name: b7178209152452e82f5908513385018524472640d67547927d6b4c0aa0c15a46
Diffstat (limited to 'src/attach.c')
| -rw-r--r-- | src/attach.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/attach.c b/src/attach.c index f85952f7c..5d0e2def2 100644 --- a/src/attach.c +++ b/src/attach.c @@ -502,6 +502,9 @@ int sqlite3FixSrcList( if( sqlite3FixSelect(pFix, pItem->pSelect) ) return 1; if( sqlite3FixExpr(pFix, pItem->pOn) ) return 1; #endif + if( pItem->fg.isTabFunc && sqlite3FixExprList(pFix, pItem->u1.pFuncArg) ){ + return 1; + } } return 0; } |