]> git.ipfire.org Git - thirdparty/sqlite.git/commit
In the regexp extension, limit the maximum value of integers in the
authordrh <>
Fri, 26 Sep 2025 13:14:20 +0000 (13:14 +0000)
committerdrh <>
Fri, 26 Sep 2025 13:14:20 +0000 (13:14 +0000)
commit80d74f09347372105731952acd47d79fd072a5d1
treef938c1602c933565772600d605a8bffab1e786f4
parent3a94a007686ae46ae32d1740609293b5aeb55f20
In the regexp extension, limit the maximum value of integers in the
"{p,q}" syntax, as performance of the NFA used to do pattern matching
is linear in the maximum such integer.  The limit is SQLITE_MAX_REGEXP_REPEAT
which defaults to 999.  This helps to prevent DoS attacks in systems that
make use of the regexp extension.

FossilOrigin-Name: 911c745f88c0ee8569e67bbcbbab034264f8c981b505aadac3ce7289486a1a68
ext/misc/regexp.c
manifest
manifest.uuid
test/regexp2.test