Return to corrupt7.test CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / sqlite3 / test

sqlite3

    1: # 2008 June 11
    2: #
    3: # The author disclaims copyright to this source code.  In place of
    4: # a legal notice, here is a blessing:
    5: #
    6: #    May you do good and not evil.
    7: #    May you find forgiveness for yourself and forgive others.
    8: #    May you share freely, never taking more than you give.
    9: #
   10: #***********************************************************************
   11: # This file implements regression tests for SQLite library.
   12: #
   13: # This file implements tests to make sure SQLite does not crash or
   14: # segfault if it sees a corrupt database file.  It specifically focuses
   15: # on corrupt cell offsets in a btree page.
   16: #
   17: # $Id: corrupt7.test,v 1.1.1.1 2012/02/21 17:04:16 misho Exp $
   18: 
   19: set testdir [file dirname $argv0]
   20: source $testdir/tester.tcl
   21: 
   22: # Do not use a codec for tests in this file, as the database file is
   23: # manipulated directly using tcl scripts (using the [hexio_write] command).
   24: #
   25: do_not_use_codec
   26: 
   27: # We must have the page_size pragma for these tests to work.
   28: #
   29: ifcapable !pager_pragmas {
   30:   finish_test
   31:   return
   32: }
   33: 
   34: # Create a simple, small database.
   35: #
   36: do_test corrupt7-1.1 {
   37:   execsql {
   38:     PRAGMA auto_vacuum=OFF;
   39:     PRAGMA page_size=1024;
   40:     CREATE TABLE t1(x);
   41:     INSERT INTO t1(x) VALUES(1);
   42:     INSERT INTO t1(x) VALUES(2);
   43:     INSERT INTO t1(x) SELECT x+2 FROM t1;
   44:     INSERT INTO t1(x) SELECT x+4 FROM t1;
   45:     INSERT INTO t1(x) SELECT x+8 FROM t1;
   46:   }
   47:   file size test.db
   48: } [expr {1024*2}]
   49: 
   50: # Verify that the file format is as we expect.  The page size
   51: # should be 1024 bytes.
   52: #
   53: do_test corrupt7-1.2 {
   54:   hexio_get_int [hexio_read test.db 16 2]
   55: } 1024   ;# The page size is 1024
   56: do_test corrupt7-1.3 {
   57:   hexio_get_int [hexio_read test.db 20 1]
   58: } 0      ;# Unused bytes per page is 0
   59: 
   60: integrity_check corrupt7-1.4
   61: 
   62: # Deliberately corrupt some of the cell offsets in the btree page
   63: # on page 2 of the database.
   64: #
   65: # The error message is different depending on whether or not the
   66: # SQLITE_ENABLE_OVERSIZE_CELL_CHECK compile-time option is engaged.
   67: #
   68: ifcapable oversize_cell_check {
   69:   do_test corrupt7-2.1 {
   70:     db close
   71:     hexio_write test.db 1062 FF
   72:     sqlite3 db test.db
   73:     db eval {PRAGMA integrity_check(1)}
   74:   } {{*** in database main ***
   75: Page 2: btreeInitPage() returns error code 11}}
   76:   do_test corrupt7-2.2 {
   77:     db close
   78:     hexio_write test.db 1062 04
   79:     sqlite3 db test.db
   80:     db eval {PRAGMA integrity_check(1)}
   81:   } {{*** in database main ***
   82: Page 2: btreeInitPage() returns error code 11}}
   83: } else {
   84:   do_test corrupt7-2.1 {
   85:     db close
   86:     hexio_write test.db 1062 FF
   87:     sqlite3 db test.db
   88:     db eval {PRAGMA integrity_check(1)}
   89:   } {{*** in database main ***
   90: Corruption detected in cell 15 on page 2}}
   91:   do_test corrupt7-2.2 {
   92:     db close
   93:     hexio_write test.db 1062 04
   94:     sqlite3 db test.db
   95:     db eval {PRAGMA integrity_check(1)}
   96:   } {{*** in database main ***
   97: On tree page 2 cell 15: Rowid 0 out of order (previous was 15)}}
   98: }
   99:   
  100: # The code path that was causing the buffer overrun that this test
  101: # case was checking for was removed.
  102: #
  103: #do_test corrupt7-3.1 {
  104: #  execsql {
  105: #    DROP TABLE t1;
  106: #    CREATE TABLE t1(a, b);
  107: #    INSERT INTO t1 VALUES(1, 'one');
  108: #    INSERT INTO t1 VALUES(100, 'one hundred');
  109: #    INSERT INTO t1 VALUES(100000, 'one hundred thousand');
  110: #    CREATE INDEX i1 ON t1(b);
  111: #  }
  112: #  db close
  113: #
  114: #  # Locate the 3rd cell in the index.
  115: #  set cell_offset [hexio_get_int [hexio_read test.db [expr 1024*2 + 12] 2]]
  116: #  incr cell_offset [expr 1024*2]
  117: #  incr cell_offset 1
  118: #
  119: #  # This write corrupts the "header-size" field of the database record
  120: #  # stored in the index cell. At one point this was causing sqlite to 
  121: #  # reference invalid memory.
  122: #  hexio_write test.db $cell_offset FFFF7F
  123: #  
  124: #  sqlite3 db test.db
  125: #  catchsql {
  126: #    SELECT b FROM t1 WHERE b > 'o' AND b < 'p';
  127: #  }
  128: #} {1 {database disk image is malformed}}
  129: 
  130: finish_test