From 219b8e7e7587df8669d96ce867cdd61ca1c05730 Mon Sep 17 00:00:00 2001 From: drh Date: Thu, 14 May 2020 23:59:24 +0000 Subject: [PATCH] Fix a null pointer deference that can occur on a strange matchinfo() query. FossilOrigin-Name: a4dd148928ea65bd4e1654dfacc3d8057d1f85b8c9939416991d50722e5a720e Upstream-Status: Backport CVE: CVE-2020-13632 [https://github.com/sqlite/sqlite/commit/219b8e7e7587df8669d96ce867cdd61ca1c05730] Signed-off-by: Li Wang --- sqlite3.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sqlite3.c b/sqlite3.c index fd28360..ee455e5 100644 --- a/sqlite3.c +++ b/sqlite3.c @@ -177622,7 +177622,7 @@ static int fts3ExprLHits( iStart = pExpr->iPhrase * ((p->nCol + 31) / 32); } - while( 1 ){ + if( pIter ) while( 1 ){ int nHit = fts3ColumnlistCount(&pIter); if( (pPhrase->iColumn>=pTab->nColumn || pPhrase->iColumn==iCol) ){ if( p->flag==FTS3_MATCHINFO_LHITS ){ -- 2.17.1