From b06e1dcb6838782532cc810741e74a068f8f69f5 Mon Sep 17 00:00:00 2001
From: ryne3366 <zengchuanrui@huawei.com>
Date: Wed, 13 Aug 2025 16:27:44 +0800
Subject: [PATCH]  Fix CVE-2025-7458

 Signed-off-by: ryne3366 <zengchuanrui@huawei.com>
---
 src/sqlite3.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/sqlite3.c b/src/sqlite3.c
index a4d56e0..54e989a 100644
--- a/src/sqlite3.c
+++ b/src/sqlite3.c
@@ -162284,6 +162284,10 @@ static int wherePathSolver(WhereInfo *pWInfo, LogEst nRowEst){
       if( pFrom->isOrdered==pWInfo->pOrderBy->nExpr ){
         pWInfo->eDistinct = WHERE_DISTINCT_ORDERED;
       }
+      if( pWInfo->pSelect->pOrderBy
+       && pWInfo->nOBSat > pWInfo->pSelect->pOrderBy->nExpr ){
+        pWInfo->nOBSat = pWInfo->pSelect->pOrderBy->nExpr;
+      }
     }else{
       pWInfo->revMask = pFrom->revLoop;
       if( pWInfo->nOBSat<=0 ){
-- 
Gitee