aboutsummaryrefslogtreecommitdiff
path: root/src/expr.c
diff options
context:
space:
mode:
authordan <Dan Kennedy>2024-07-08 17:39:52 +0000
committerdan <Dan Kennedy>2024-07-08 17:39:52 +0000
commit68d700cac6a99535655e3afd82a5f935dd123588 (patch)
treefe3ae2bfbf4086e5de693745c2e65f334bc14698 /src/expr.c
parentbee10b987cc67b736223f4cb9e110b3e678c211e (diff)
downloadsqlite-68d700cac6a99535655e3afd82a5f935dd123588.tar.gz
sqlite-68d700cac6a99535655e3afd82a5f935dd123588.zip
Fix a use-after-free that could occur following an OOM introduced by [d8cedbe0].
FossilOrigin-Name: 4fabfacfcf38e129949d3e4e2c3ffde3da3cd40d9d12c97ca29bc7c3604db6ed
Diffstat (limited to 'src/expr.c')
-rw-r--r--src/expr.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/expr.c b/src/expr.c
index e7df61c86..b9310fb39 100644
--- a/src/expr.c
+++ b/src/expr.c
@@ -3563,8 +3563,8 @@ void sqlite3CodeRhsOfIN(
pSig->iAddr = pExpr->y.sub.iAddr;
pSig->regReturn = pExpr->y.sub.regReturn;
pSig->iTable = iTab;
- sqlite3VdbeChangeP4(v, -1, (const char*)pSig, P4_SUBRTNSIG);
pParse->mSubrtnSig = 1 << (pSig->selId&7);
+ sqlite3VdbeChangeP4(v, -1, (const char*)pSig, P4_SUBRTNSIG);
}
addrOnce = sqlite3VdbeAddOp0(v, OP_Once); VdbeCoverage(v);
}