diff options
| author | larrybr <larrybr@noemail.net> | 2022-12-04 23:20:38 +0000 |
|---|---|---|
| committer | larrybr <larrybr@noemail.net> | 2022-12-04 23:20:38 +0000 |
| commit | 8af6d712daa725fcdfcf63fcbcfd017633c41e10 (patch) | |
| tree | e0a5f4a756cb1cb31963bbd0bc7d088d1b58321b /src | |
| parent | a81c5b3a88558859abe593c8e539920d55ae68eb (diff) | |
| download | sqlite-8af6d712daa725fcdfcf63fcbcfd017633c41e10.tar.gz sqlite-8af6d712daa725fcdfcf63fcbcfd017633c41e10.zip | |
Fix safe mode authorizer callback to reject disallowed UDFs. Reported at [forum:/forumpost/07beac8056151b2f|Forum post 07beac8056151b2f].
FossilOrigin-Name: cefc032473ac5ad244c0b6402c541b2f76c0c65a041bda03bfbe7c0e2c11fac2
Diffstat (limited to 'src')
| -rw-r--r-- | src/shell.c.in | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/shell.c.in b/src/shell.c.in index a829fa238..0f8108e05 100644 --- a/src/shell.c.in +++ b/src/shell.c.in @@ -1880,7 +1880,7 @@ static int safeModeAuth( "zipfile", "zipfile_cds", }; - UNUSED_PARAMETER(zA2); + UNUSED_PARAMETER(zA1); UNUSED_PARAMETER(zA3); UNUSED_PARAMETER(zA4); switch( op ){ @@ -1895,7 +1895,7 @@ static int safeModeAuth( case SQLITE_FUNCTION: { int i; for(i=0; i<ArraySize(azProhibitedFunctions); i++){ - if( sqlite3_stricmp(zA1, azProhibitedFunctions[i])==0 ){ + if( sqlite3_stricmp(zA2, azProhibitedFunctions[i])==0 ){ failIfSafeMode(p, "cannot use the %s() function in safe mode", azProhibitedFunctions[i]); } |