1 files changed, 3 insertions, 0 deletions
diff --git a/src/btree.c b/src/btree.c
index c54fd2e7c..1c48d6e8c 100644
--- a/src/btree.c
+++ b/src/btree.c
@@ -3743,6 +3743,9 @@ static int modifyPagePointer(MemPage *pPage, Pgno iFrom, Pgno iTo, u8 eType){
           }
         }
       }else{
+        if( pCell+4 > pPage->aData+pPage->pBt->usableSize ){
+          return SQLITE_CORRUPT_PAGE(pPage);
+        }
         if( get4byte(pCell)==iFrom ){
           put4byte(pCell, iTo);
           break;