Skip to content

Update to sqlite 3.54.1 - #26

Open
louisabraham wants to merge 1 commit into
go-llsqlite:masterfrom
conception-ai:sqlite-3.54.1
Open

louisabraham wants to merge 1 commit into
go-llsqlite:masterfrom
conception-ai:sqlite-3.54.1

Conversation

@louisabraham

Copy link
Copy Markdown

Updates the bundled amalgamation from 3.53.0 to 3.54.1 (2026-10-16), the latest release.

Only c/sqlite3.c, sqlite3.h and sqlite3ext.h change, as in #11. The files come from the official sqlite-amalgamation-3540100.zip. Its SHA3-256, 92281c86e2957f9b9305890f9ac04204caa7b677cc868dc326d942689df28e30, is the value listed on https://sqlite.org/download.html.

Why

3.53.0 has a heap use-after-free in FTS5 that plain SQL reaches: a tokenize=trigram table, one row, and a NEAR query (https://sqlite.org/src/info/9c018b02db, fixed in 3.53.3). AddressSanitizer reports heap-use-after-free in sqlite3Fts5PoslistNext64 on the 3.53.0 amalgamation built with this package's sqlite_config.h, and nothing on 3.54.1.

Checks

  • 3.54.1 adds no authorizer action code (still 0 to 33), so newActionInfo decodes every code it can receive.
  • go test ./... passes.
  • CHANGELOG.md has an entry under Unreleased.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant