/ 
DBD-SQLite-1.64
River stage four • 518 direct dependents • 1146 total dependents
⭐ Starred 28 GitHub stars
Security Advisories (11)
CVE-2020-13434 (2020-05-24)

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

CVE-2020-11656 (2020-04-09)

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

CVE-2020-9327 (2020-02-21)

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVE-2020-13630 (2020-05-27)

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

CVE-2020-15358 (2020-06-27)

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

CVE-2020-13632 (2020-05-27)

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

CVE-2020-13631 (2020-05-27)

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

CVE-2020-13435 (2020-05-24)

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

CVE-2020-11655 (2020-04-09)

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CVE-2019-19646 (2019-12-09)

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVE-2019-19645 (2019-12-09)

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

Changes for version 1.64 - 2019-08-12

  • Switched to a production version

Changes for version 1.63_05 - 2019-07-12

  • Upgraded SQLite to 3.29.0
  • Added sqlite_get_autocommit private method (GH#52)
  • Addded new db_config constants, notably to prohibit double-quoted string literals

Changes for version 1.63_04 - 2019-05-25

  • Upgraded SQLite to 3.28.0
  • Modified doc for sqlite_db_filename which actually returns undef or an empty string (GH#50)
  • Fixed ->quote($blob, SQL_BLOB) to quote correctly (GH#51, pali++)

Changes for version 1.63_03 - 2019-02-15

  • Applied a patch to fix segmentation fault on 32-bit big-endian platforms by Niko Tyni (GH#45)

Changes for version 1.63_02 - 2019-02-14

  • Upgraded SQLite to 3.27.1
  • Let a URI filename test skip if SQLite is compiled with URI filename support (GH#47)

Changes for version 1.63_01 - 2019-01-26

  • Made sure an internal hv is initialized (GH#45)
  • Fixed a number of tests to skip
  • Bumped up Test::More requirement
  • Replaced bundled Test::NoWarnings with Test::FailWarnings
  • Handle 'unknown' op in DBD::SQLite::VirtualTable::PerlData (Corion++)

Documentation

DBD::SQLite::Cookbook
The DBD::SQLite Cookbook
DBD::SQLite::Fulltext_search
Using fulltext searches with DBD::SQLite

Modules

DBD::SQLite
Self-contained RDBMS in a DBI Driver
DBD::SQLite::Constants
common SQLite constants
DBD::SQLite::VirtualTable
SQLite virtual tables implemented in Perl
DBD::SQLite::VirtualTable::FileContent
virtual table for viewing file contents
DBD::SQLite::VirtualTable::PerlData
virtual table hooked to Perl data

Provides

DBD::SQLite::GetInfo
in lib/DBD/SQLite/GetInfo.pm
DBD::SQLite::VirtualTable::Cursor
in lib/DBD/SQLite/VirtualTable.pm
DBD::SQLite::VirtualTable::FileContent::Cursor
in lib/DBD/SQLite/VirtualTable/FileContent.pm
DBD::SQLite::VirtualTable::PerlData::Cursor
in lib/DBD/SQLite/VirtualTable/PerlData.pm

Other files