From: dan <Dan Kennedy>
Date: Mon, 1 Jun 2026 11:52:23 +0000 (+0000)
Subject: Fix an integer overflow that could lead to a buffer overrun in the zipfile extension... 
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=3040da55a804083fa10fa8aa366e144f2373cdde;p=thirdparty%2Fsqlite.git

Fix an integer overflow that could lead to a buffer overrun in the zipfile extension. Bug [bugs:/info/2026-06-01T10:16:47Z | 2026-06-01T10:16:47Z].

FossilOrigin-Name: a8dac6af353c02aed8eaaba5921e036d3f3a6639367ae70e8c75d759c7b4ab52
---

3040da55a804083fa10fa8aa366e144f2373cdde
diff --cc manifest
index c7e27cd116,4ab6d47a17..56f4cadeac
--- a/manifest
+++ b/manifest
@@@ -1,5 -1,5 +1,5 @@@
- C Extra\sdefenses\sagainst\sinteger\soverflows\sin\sthe\suntested,\sunused,\sand\nunsupported\stransliterate()\sSQL\sextension\sfunction\sfound\sin\sthe\next/misc/spellfix.c\sextension.\n[bugs:/info/2026-06-01T10:34:57Z|Bug\s2026-06-01T10:34:57Z].
- D 2026-06-01T10:53:28.842
 -C Update\snew\stest\sin\szipfile.test\sso\sthat\sit\sdoes\snot\srun\sif\sSQLITE_MAX_LENGTH\sis\stoo\ssmall.
 -D 2026-06-01T11:50:55.743
++C Fix\san\sinteger\soverflow\sthat\scould\slead\sto\sa\sbuffer\soverrun\sin\sthe\szipfile\sextension.\sBug\s[bugs:/info/2026-06-01T10:16:47Z\s|\s2026-06-01T10:16:47Z].
++D 2026-06-01T11:52:23.115
  F .fossil-settings/binary-glob 61195414528fb3ea9693577e1980230d78a1f8b0a54c78cf1b9b24d0a409ed6a x
  F .fossil-settings/empty-dirs dbb81e8fc0401ac46a1491ab34a7f2c7c0452f2f06b54ebb845d024ca8283ef1
  F .fossil-settings/ignore-glob 35175cdfcf539b2318cb04a9901442804be81cd677d8b889fcc9149c21f239ea
@@@ -2207,8 -2207,8 +2207,9 @@@ F tool/warnings-clang.sh bbf6a1e685e534
  F tool/warnings.sh a554d13f6e5cf3760f041b87939e3d616ec6961859c3245e8ef701d1eafc2ca2
  F tool/win/sqlite.vsix deb315d026cc8400325c5863eef847784a219a2f
  F tool/winmain.c 00c8fb88e365c9017db14c73d3c78af62194d9644feaf60e220ab0f411f3604c
- P 3c0a277e6741c72281e12c44d85902aa6780890a7f59bacc3ac2b35ba27f7211
- R 3bd88975f95471549391672b1622c193
- U drh
- Z 4d79a37e6e6b4de0f03774c92dda2604
 -P 7c740d2cfd22a89258be2221860ca10985f0fc16dc7a17a99fc282d7105dc38e
++P 2b073519b6080abc8872b0728c64827cc088d1b43f132cd2aeb396f06de3d36f cc86820e198db6ee4e62f455d3dd9877d73873aaccad6ceffd0b34452d35c89c
+ R 6fc3e7ce84a5a456338015adf8a6b339
++T +closed cc86820e198db6ee4e62f455d3dd9877d73873aaccad6ceffd0b34452d35c89c
+ U dan
 -Z 96898ff5669e695c7929e27c8a9e78af
++Z debaee7cc6e028d3c510d9935b697d9d
  # Remove this line to create a well-formed Fossil manifest.
diff --cc manifest.uuid
index 5451cc7a9b,56d683875d..707362aab3
--- a/manifest.uuid
+++ b/manifest.uuid
@@@ -1,1 -1,1 +1,1 @@@
- 2b073519b6080abc8872b0728c64827cc088d1b43f132cd2aeb396f06de3d36f
 -cc86820e198db6ee4e62f455d3dd9877d73873aaccad6ceffd0b34452d35c89c
++a8dac6af353c02aed8eaaba5921e036d3f3a6639367ae70e8c75d759c7b4ab52