From 28cb67e3cdd239ad19b0db227945d6349d47c137 Mon Sep 17 00:00:00 2001
From: wuxiaolei <wuxiaolei@kylinos.cn>
Date: Sat, 19 Apr 2025 16:52:27 +0800
Subject: [PATCH] fix CVE-2025-3277

Signed-off-by: wuxiaolei <wuxiaolei@kylinos.cn>
---
 backpoint-0001-CVE-2025-3277.patch | 13 +++++++++++++
 sqlite.spec                        |  6 +++++-
 2 files changed, 18 insertions(+), 1 deletion(-)
 create mode 100644 backpoint-0001-CVE-2025-3277.patch

diff --git a/backpoint-0001-CVE-2025-3277.patch b/backpoint-0001-CVE-2025-3277.patch
new file mode 100644
index 0000000..432e69b
--- /dev/null
+++ b/backpoint-0001-CVE-2025-3277.patch
@@ -0,0 +1,13 @@
+diff --git a/src/func.c b/src/func.c
+index 7a47745..d99f850 100644
+--- a/src/func.c
++++ b/src/func.c
+@@ -1571,7 +1571,7 @@ static void concatFuncCore(
+   for(i=0; i<argc; i++){
+     n += sqlite3_value_bytes(argv[i]);
+   }
+-  n += (argc-1)*nSep;
++  n += (argc-1)*(i64)nSep;
+   z = sqlite3_malloc64(n+1);
+   if( z==0 ){
+     sqlite3_result_error_nomem(context);
diff --git a/sqlite.spec b/sqlite.spec
index 5bc9503..e02ccf3 100644
--- a/sqlite.spec
+++ b/sqlite.spec
@@ -3,7 +3,7 @@
 Name:    sqlite
 Version: 3.48.0
 %global extver %(echo %{version} |awk -F. '{printf "%d%02d%02d00", $1,$2,$3}')
-Release: 3
+Release: 4
 Summary: Embeded SQL database
 License: Public Domain
 URL:     https://www.sqlite.org/
@@ -12,6 +12,7 @@ Source0: https://www.sqlite.org/2025/sqlite-src-%{extver}.zip
 Source1: https://www.sqlite.org/2025/sqlite-doc-%{extver}.zip
 Source2: https://www.sqlite.org/2025/sqlite-autoconf-%{extver}.tar.gz
 Patch0:  sqlite-3.48.0-buildtclext.patch
+Patch0:  backpoint-0001-CVE-2025-3277.patch
 
 BuildRequires: gcc tcl tcl-devel
 BuildRequires: ncurses-devel readline-devel glibc-devel
@@ -123,6 +124,9 @@ rm -rf test/thread2.test
 %{_mandir}/man*/*
 
 %changelog
+* Sat Apr 19 2025 wuxiaolei <wuxiaolei@kylinos.cn> - 3.48.0-4
+- fix CVE-2025-3277
+
 * Mon Mar 10 2025 Funda Wang <fundawang@yeah.net> - 3.48.0-3
 - remove rpath for tcl binding
 
-- 
Gitee