1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
|
# 2014-01-20
#
# The author disclaims copyright to this source code. In place of
# a legal notice, here is a blessing:
#
# May you do good and not evil.
# May you find forgiveness for yourself and forgive others.
# May you share freely, never taking more than you give.
#
#***********************************************************************
#
set testdir [file dirname $argv0]
source $testdir/tester.tcl
set testprefix corruptH
# This module uses hard-coded offsets which do not work if the reserved_bytes
# value is nonzero.
if {[nonzero_reserved_bytes]} {finish_test; return;}
database_may_be_corrupt
# The corruption migrations tested by the code in this file are not detected
# mmap mode.
#
# The reason is that in mmap mode, the different queries may use different
# PgHdr objects for the same page (same data, but different PgHdr container
# objects). And so the corruption is not detected.
#
if {[permutation]=="mmap"} {
finish_test
return
}
# Initialize the database.
#
do_execsql_test 1.1 {
PRAGMA page_size=1024;
CREATE TABLE t1(a INTEGER PRIMARY KEY, b);
INSERT INTO t1 VALUES(1, 'one');
INSERT INTO t1 VALUES(2, 'two');
CREATE TABLE t2(x);
INSERT INTO t2 VALUES(randomblob(200));
INSERT INTO t2 SELECT randomblob(200) FROM t2;
INSERT INTO t2 SELECT randomblob(200) FROM t2;
INSERT INTO t2 SELECT randomblob(200) FROM t2;
INSERT INTO t2 SELECT randomblob(200) FROM t2;
INSERT INTO t2 SELECT randomblob(200) FROM t2;
INSERT INTO t2 SELECT randomblob(200) FROM t2;
} {}
# Corrupt the file so that the root page of t1 is also linked into t2 as
# a leaf page.
#
do_test 1.2 {
db eval { SELECT name, rootpage FROM sqlite_master } {
set r($name) $rootpage
}
db close
hexio_write test.db [expr {($r(t2)-1)*1024 + 11}] [format %.2X $r(t1)]
sqlite3 db test.db
} {}
do_test 1.3 {
db eval { PRAGMA secure_delete=1 }
list [catch {
db eval { SELECT * FROM t1 WHERE a IN (1, 2) } {
db eval { DELETE FROM t2 }
}
} msg] $msg
} {1 {database disk image is malformed}}
#-------------------------------------------------------------------------
reset_db
# Initialize the database.
#
do_execsql_test 2.1 {
PRAGMA auto_vacuum=0;
PRAGMA page_size=1024;
CREATE TABLE t1(a INTEGER PRIMARY KEY, b);
INSERT INTO t1 VALUES(1, 'one');
INSERT INTO t1 VALUES(2, 'two');
CREATE TABLE t3(x);
CREATE TABLE t2(x PRIMARY KEY) WITHOUT ROWID;
INSERT INTO t2 VALUES(randomblob(100));
DROP TABLE t3;
} {}
do_test 2.2 {
db eval { SELECT name, rootpage FROM sqlite_master } {
set r($name) $rootpage
}
db close
set fl [hexio_get_int [hexio_read test.db 32 4]]
hexio_write test.db [expr {($fl-1) * 1024 + 0}] 00000000
hexio_write test.db [expr {($fl-1) * 1024 + 4}] 00000001
hexio_write test.db [expr {($fl-1) * 1024 + 8}] [format %.8X $r(t1)]
hexio_write test.db 36 00000002
sqlite3 db test.db
} {}
# The trick here is that the root page of the tree scanned by the outer
# query is also currently on the free-list. So while the first seek on
# the table (for a==1) works, by the time the second is attempted The
# "INSERT INTO t2..." statements have recycled the root page of t1 and
# used it as an index leaf. Normally, BtreeMovetoUnpacked() detects
# that the PgHdr object associated with said root page does not match
# the cursor (as it is now marked with PgHdr.intKey==0) and returns
# SQLITE_CORRUPT.
#
set res23 {1 {database disk image is malformed}}
do_test 2.3 {
list [catch {
set res [list]
db eval { SELECT * FROM t1 WHERE a IN (1, 2) } {
db eval {
INSERT INTO t2 SELECT randomblob(100) FROM t2;
INSERT INTO t2 SELECT randomblob(100) FROM t2;
INSERT INTO t2 SELECT randomblob(100) FROM t2;
INSERT INTO t2 SELECT randomblob(100) FROM t2;
INSERT INTO t2 SELECT randomblob(100) FROM t2;
}
lappend res $b
}
set res
} msg] $msg
} $res23
#-------------------------------------------------------------------------
reset_db
# Initialize the database.
#
do_execsql_test 3.1 {
PRAGMA page_size=1024;
CREATE TABLE t1(a INTEGER PRIMARY KEY, b);
INSERT INTO t1 VALUES(1, 'one');
INSERT INTO t1 VALUES(2, 'two');
CREATE TABLE t2(c INTEGER PRAGMA KEY, d);
INSERT INTO t2 VALUES(1, randomblob(1100));
} {}
do_test 3.2 {
db eval { SELECT name, rootpage FROM sqlite_master } {
set r($name) $rootpage
}
db close
hexio_write test.db [expr {($r(t2)-1) * 1024 + 1020}] 00000002
sqlite3 db test.db
} {}
do_test 3.3 {
list [catch {
db eval { SELECT * FROM t1 WHERE a IN (1, 2) } {
db eval {
DELETE FROM t2 WHERE c=1;
}
}
} msg] $msg
} {1 {database disk image is malformed}}
finish_test
|
