chn/nixpkgs
1
0
Fork 0
mirror of https://github.com/CHN-beta/nixpkgs.git synced 2026-01-13 11:30:35 +08:00
Code Issues Packages Projects Releases Wiki Activity

sqlite: patch CVE-2022-35737

Browse Source
This commit is contained in:
Maximilian Bosch
2022-08-22 16:12:32 +02:00
committed by Winter
parent 28e2f31bd6
commit d915be48c6
2 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
pkgs/development/libraries/sqlite/CVE-2022-35737.patch Normal file
View File

@@ -0,0 +1,15 @@
diff --git a/sqlite3.c b/sqlite3.c
index eb8d7d5..3918a09 100644
--- a/sqlite3.c
+++ b/sqlite3.c
@@ -30231,8 +30231,8 @@ SQLITE_API void sqlite3_str_vappendf(
case etSQLESCAPE: /* %q: Escape ' characters */
case etSQLESCAPE2: /* %Q: Escape ' and enclose in '...' */
case etSQLESCAPE3: { /* %w: Escape " characters */
- int i, j, k, n, isnull;
- int needQuote;
+ i64 i, j, k, n;
+ int needQuote, isnull;
char ch;
char q = ((xtype==etSQLESCAPE3)?'"':'\''); /* Quote character */
char *escarg;

2
pkgs/development/libraries/sqlite/default.nix
View File

@@ -21,6 +21,8 @@ stdenv.mkDerivation rec {
sha256 = "sha256-WvB96YK6ZY/ZGgMXDJRfmclx9pVbx53zJmVENz45hpw=";
};
patches = [ ./CVE-2022-35737.patch ];
outputs = [ "bin" "dev" "out" ];
separateDebugInfo = stdenv.isLinux;