gitlab.com/CoiaPrant/sqlite3@v1.19.1/testdata/tcl/fuzz2.test (about)

     1  # 2007 May 10
     2  #
     3  # The author disclaims copyright to this source code.  In place of
     4  # a legal notice, here is a blessing:
     5  #
     6  #    May you do good and not evil.
     7  #    May you find forgiveness for yourself and forgive others.
     8  #    May you share freely, never taking more than you give.
     9  #
    10  #***********************************************************************
    11  # This file implements regression tests for SQLite library. 
    12  #
    13  # This file checks error recovery from malformed SQL strings.
    14  #
    15  
    16  set testdir [file dirname $argv0]
    17  source $testdir/tester.tcl
    18  
    19  
    20  proc fuzzcatch {sql} {
    21    return [lindex [catchsql $sql] 0]
    22  }
    23  
    24  do_test fuzz2-1.1 {
    25    fuzzcatch {SELECT ALL "AAAAAA" . * GROUP BY LIMIT round(1), #12}
    26  } {1}
    27  do_test fuzz2-2.0 {
    28    fuzzcatch {SELECT + #100}
    29  } {1}
    30  do_test fuzz2-2.1 {
    31    fuzzcatch {SELECT 1 WHERE ( #61 NOT MATCH ROUND( 1 ) )}
    32  } {1}
    33  do_test fuzz2-2.2 {
    34    fuzzcatch {SELECT 1 LIMIT NOT #59 COLLATE AAAAAA NOT IN 
    35      ( "AAAAAA" NOTNULL <= x'414141414141' IS NULL , ( ROUND ( 1.0 ) ) )}
    36  } {1}
    37  do_test fuzz2-2.3 {
    38    fuzzcatch {INSERT OR REPLACE INTO AAAAAA . "AAAAAA" ( "AAAAAA" ) SELECT DISTINCT * , ( SELECT #252 IN ( SELECT DISTINCT AAAAAA . * ) )}
    39  } {1}
    40  do_test fuzz2-2.4 {
    41    fuzzcatch {SELECT 1 LIMIT NOT #59 COLLATE AAAAAA NOT IN round(1.0)}
    42  } {1}
    43  do_test fuzz2-2.5 {
    44    fuzzcatch {SELECT( #239 )}
    45  } {1}
    46  do_test fuzz2-2.6 {
    47    fuzzcatch {DELETE FROM AAAAAA WHERE #65 NOT NULL}
    48  } {1}
    49  do_test fuzz2-2.7 {
    50    fuzzcatch {ATTACH ROUND( 1.0 ) in  AAAAAA . "AAAAAA" AS #122 ISNULL}
    51  } {1}
    52  do_test fuzz2-2.8 {
    53    fuzzcatch {SELECT 1 LIMIT  #122 ISNULL}
    54  } {1}
    55  do_test fuzz2-2.9 {
    56    fuzzcatch {CREATE VIEW AAAAAA . "AAAAAA" AS SELECT DISTINCT #162 IS NULL "AAAAAA"}
    57  } {1}
    58  do_test fuzz2-2.10 {
    59    fuzzcatch {DELETE FROM AAAAAA WHERE #202 IS NOT NULL ISNULL}
    60  } {1}
    61  do_test fuzz2-2.11 {
    62    fuzzcatch {UPDATE OR IGNORE "AAAAAA" . "AAAAAA" SET "AAAAAA" = NOT #96}
    63  } {1}
    64  do_test fuzz2-2.12 {
    65    fuzzcatch {SELECT - #196}
    66  } {1}
    67  
    68  ifcapable {trigger} {  # Only do the following tests if triggers are enabled
    69  
    70  do_test fuzz2-3.0 {
    71    fuzzcatch {CREATE TRIGGER "AAAAAA" . "AAAAAA" AFTER UPDATE OF "AAAAAA" , "AAAAAA" ON "AAAAAA" . "AAAAAA" FOR EACH ROW BEGIN UPDATE AAAAAA SET "AAAAAA" = #162;  END}
    72  } {1}
    73  do_test fuzz2-3.1 {
    74    fuzzcatch {CREATE TRIGGER IF NOT EXISTS "AAAAAA" UPDATE ON "AAAAAA" . AAAAAA FOR EACH ROW BEGIN DELETE FROM "AAAAAA" ; INSERT INTO AAAAAA ( "AAAAAA" ) SELECT DISTINCT "AAAAAA" "AAAAAA" , #167 AAAAAA , "AAAAAA" . * ORDER BY "AAAAAA" ASC , x'414141414141' BETWEEN RAISE ( FAIL , "AAAAAA" ) AND AAAAAA ( * ) NOT NULL DESC LIMIT AAAAAA ; REPLACE INTO AAAAAA ( AAAAAA ) VALUES ( AAAAAA ( * ) ) ; END}
    75  } {1}
    76  do_test fuzz2-3.2 {
    77    fuzzcatch {CREATE TEMP TRIGGER IF NOT EXISTS AAAAAA . "AAAAAA" BEFORE UPDATE OF "AAAAAA" ON AAAAAA . "AAAAAA" BEGIN SELECT ALL * , #175 "AAAAAA" FROM "AAAAAA" . AAAAAA;  END}
    78  } {1}
    79  
    80  } ;# End of ifcapable {trigger}
    81  
    82  do_test fuzz2-4.0 {
    83    fuzzcatch {ATTACH DATABASE #168 AS whatever}
    84  } {1}
    85  do_test fuzz2-4.1 {
    86    fuzzcatch {DETACH #133}
    87  } {1}
    88  do_test fuzz2-5.0 {
    89    fuzzcatch {SELECT 1 LIMIT ( SELECT DISTINCT * , AAAAAA , * , AAAAAA , "AAAAAA" . * FROM "AAAAAA" ON ROUND( 1 ) COLLATE AAAAAA OR "AAAAAA" USING ( AAAAAA , "AAAAAA" ) WHERE ROUND( 1 ) GROUP BY ORDER BY #84 ASC , #44 DESC , ( SELECT "AAAAAA" . * , "AAAAAA" . * FROM , ( ) "AAAAAA" USING ( )}
    90  } {1}
    91  do_test fuzz2-5.1 {
    92    fuzzcatch {SELECT 1 WHERE 1 == AAAAAA ( * ) BETWEEN + - ~ + "AAAAAA" . AAAAAA | RAISE ( IGNORE ) COLLATE AAAAAA NOT IN ( SELECT DISTINCT "AAAAAA" . * , * , * WHERE ( SELECT ALL AAAAAA AS "AAAAAA" HAVING CAST ( "AAAAAA" . "AAAAAA" . "AAAAAA" AS AAAAAA ) ORDER BY , , IS NULL ASC , ~ AND DESC LIMIT ( ( "AAAAAA" ) NOT BETWEEN ( ) NOT IN ( ) AND AAAAAA ( ) IS NOT NULL ) OFFSET AAAAAA ( ALL , , ) ) GROUP BY ORDER BY "AAAAAA" . AAAAAA ASC , NULL IN ( SELECT UNION ALL SELECT ALL WHERE HAVING ORDER BY LIMIT UNION SELECT DISTINCT FROM ( ) WHERE + HAVING >> ORDER BY LIMIT . . , "AAAAAA" ) , CAST ( ~ "AAAAAA" . AAAAAA AS "AAAAAA" AAAAAA "AAAAAA" ( + 4294967295 , - 4294967296.0 ) ) ASC LIMIT AAAAAA INTERSECT SELECT ALL * GROUP BY , AAAAAA ( DISTINCT , ) != #241 NOT IN ( , , ) , , CTIME_KW HAVING AAAAAA ORDER BY #103 DESC , #81 ASC LIMIT AAAAAA OFFSET ~ AAAAAA ( ALL AAAAAA . AAAAAA >= AAAAAA . "AAAAAA" . "AAAAAA" ) ) NOTNULL NOT NULL}
    93  } {1}
    94  do_test fuzz2-5.2 {
    95    fuzzcatch {SELECT 1 WHERE 1 == AAAAAA ( * ) BETWEEN + - ~ + "AAAAAA" . AAAAAA | RAISE ( IGNORE ) COLLATE AAAAAA NOT IN ( SELECT DISTINCT "AAAAAA" . * , * , * WHERE ( SELECT ALL AAAAAA AS "AAAAAA" HAVING CAST ( "AAAAAA" . "AAAAAA" . "AAAAAA" AS AAAAAA ) ORDER BY , , IS NULL ASC , ~ AND DESC LIMIT ( ( "AAAAAA" ) NOT BETWEEN ( ) NOT IN ( ) AND AAAAAA ( ) IS NOT NULL ) OFFSET AAAAAA ( ALL , , ) ) GROUP BY ORDER BY "AAAAAA" . AAAAAA ASC , NULL IN ( SELECT UNION ALL SELECT ALL WHERE HAVING ORDER BY LIMIT UNION SELECT DISTINCT FROM ( ) WHERE + HAVING >> ORDER BY LIMIT . . , "AAAAAA" ) , CAST ( ~ "AAAAAA" . AAAAAA AS "AAAAAA" AAAAAA "AAAAAA" ( + 4294967295 , - 4294967296.0 ) ) ASC LIMIT AAAAAA INTERSECT SELECT ALL * GROUP BY , AAAAAA ( DISTINCT , ) != #241 NOT IN ( , , ) , , CTIME_KW HAVING AAAAAA ORDER BY #103 DESC , #81 ASC LIMIT AAAAAA OFFSET ~ AAAAAA ( ALL AAAAAA . AAAAAA >= AAAAAA . "AAAAAA" . "AAAAAA" ) ) NOTNULL NOT NULL}
    96  } {1}
    97  do_test fuzz2-5.3 {
    98    fuzzcatch {UPDATE "AAAAAA" SET "AAAAAA" = - EXISTS ( SELECT DISTINCT * , * ORDER BY #202 ASC , #147 , ~ AAAAAA . "AAAAAA" ASC LIMIT AAAAAA . "AAAAAA" , RAISE ( ABORT , AAAAAA ) UNION ALL SELECT DISTINCT AAAAAA . * , * FROM ( SELECT DISTINCT}
    99  } {1}
   100  do_test fuzz2-5.4 {
   101    fuzzcatch {REPLACE INTO AAAAAA SELECT DISTINCT "AAAAAA" . * WHERE AAAAAA ( AAAAAA ( ) ) GROUP BY AAAAAA . AAAAAA . "AAAAAA" IN "AAAAAA" | AAAAAA ( ALL , ) ORDER BY #238, #92 DESC LIMIT 0 OFFSET - RAISE ( IGNORE ) NOT NULL > RAISE ( IGNORE ) IS NULL}
   102  } {1}
   103  do_test fuzz2-5.5 {
   104    fuzzcatch {SELECT ALL * GROUP BY EXISTS ( SELECT "AAAAAA" . * , AAAAAA ( * ) AS AAAAAA FROM "AAAAAA" . "AAAAAA" AS "AAAAAA" USING ( AAAAAA , "AAAAAA" , "AAAAAA" ) WHERE AAAAAA ( DISTINCT ) - RAISE ( FAIL , "AAAAAA" ) HAVING "AAAAAA" . "AAAAAA" . AAAAAA ORDER BY #182 , #55 ) BETWEEN EXISTS ( SELECT ALL * FROM ( ( }
   105  } {1}
   106  
   107  # Test cases discovered by Michal Zalewski on 2015-01-03 and reported on the
   108  # sqlite-users mailing list.  All of these cases cause segfaults in 
   109  # SQLite 3.8.7.4 and earlier.
   110  #
   111  do_test fuzz2-6.1 {
   112    catchsql {SELECT n()AND+#0;}
   113  } {1 {near "#0": syntax error}}
   114  do_test fuzz2-6.2 {
   115    catchsql {SELECT strftime()}
   116  } {0 {{}}}
   117  do_test fuzz2-6.3 {
   118    catchsql {DETACH(SELECT group_concat(q));}
   119  } {1 {no such column: q}}
   120  do_test fuzz2-6.4a {
   121    db eval {DROP TABLE IF EXISTS t0; CREATE TABLE t0(t);}
   122    catchsql {INSERT INTO t0 SELECT strftime();}
   123  } {0 {}}
   124  do_test fuzz2-6.4b {
   125    db eval {SELECT quote(t) FROM t0} 
   126  } {NULL}
   127  
   128  # Another test case discovered by Michal Zalewski, this on on 2015-01-22.
   129  # Ticket 32b63d542433ca6757cd695aca42addf8ed67aa6
   130  #
   131  do_test fuzz2-7.1 {
   132    catchsql {select e.*,0 from(s,(L))e;}
   133  } {1 {no such table: s}}
   134  do_test fuzz2-7.2 {
   135    catchsql {SELECT c.* FROM (a,b) AS c}
   136  } {1 {no such table: a}}
   137  
   138  
   139  finish_test