master
Were we to choose to integrate the carray() table-valued function into the amalgamation, that integration might look something like this.
Additional defenses against over-sized inputs in the (unused) amatch.c demonstration code.
Add the anycollseq.c loadable extension in etc/misc
Add NULL checks on all sqlite3_vfs_find(0) calls. This is not strictly necessary. There are no vulnerabilities here. However, adding these checks avoids unnecessary static analyzer complaints. [forum:/forumpost/ce1193be15|Forum post ce1193be15].
Fix some integer overflow warnings in the base64 and base85 extensions.
Fix compilation issue seen with MSVC.
Fix an error message on the blobread() extension function so that it says "read" instead of "write".
In the (completely unused, as far as I know) btreeinfo.c extension (not a part of any standard build) do a better job of detecting corrupt database files and provide better error messages when corruption is detected. [forum:/forumpost/e66a458339|Forum post e66a458339].
In cksumvfs, do not write checksums to the wal file, as this prevents recovery from working.
Remove unnecessary "www." prefixes on domain names in URLs.
Prevent embedded 0x00 characters in the output strings from confusing the completion extension and causing it to read past the end of an array. [forum:/forumpost/88a08b3201|Forum post 88a08b3201].
Use sqlite3_malloc64() in all places in the compress.c extension to avoid integer overflow. [forum:/forumpost/2025-12-31T01:04:00z|Forum post 2025-12-31T01:04:00z].
Use 64-bit integers to track memory allocation sizes in the CSV extension. [forum:/forumpost/e66a458339|Forum post e66a458339].
Convert the ShellText object in the CLI to use sqlite3_malloc64() rather than plain malloc(). Avoid unnecessary quoting of table names in .dump output and similar. Improved detection of OOM in set_table_name().
Extra defenses against integer overflow in the decimal extension.
Create the "trusted_schema" pragma. Add sqlite3_vtab_config() calls to set the risk rank for many virtual tables.
Ensure that all fields of static sqlite3_module objects are explicitly initialized, in order to hush-up nuisance compiler warnings.
Remove #ifdefs intended to make SQLite compatible with Windows RT. WinRT was short-lived and has been discontinued for a long time.
Avoid unsigned integer overflow in the delta_apply() extension function. Not part of any standard deliverable. [forum:/forumpost/d41879b367c7f7ec|Forum thread d41879b367c7f7ec].
Approximately 100 typo corrections spanning the whole tree, submitted via [forum:0db9827f0464bc33|forum post 0db9827f0464bc33] and individually audited and verified. Affects only code comments, innocuous test strings, error message text in tool (not library) code, and configure-level help text.
Fix a harmless signed integer overflow warning in the ieee754() extension function.
Fix harmless compiler warnings in the memstat.c extension. No changes to the core.
Fix a harmless compiler warning in the memtrace.c extension.
Fix harmless compiler warnings.
When doing a text-affinity comparison between two values where one or both have both a text and a numeric type, make sure the numeric type does not confuse the answer. This is a deeper fix to the problem observed by [forum:/forumpost/3776b48e71|forum pose 3776b48e71]. The problem bisects to [25f2246be404f38b] on 2014-08-24, prior to version 3.8.7.
Enhance the tokenizer so that it is able to deal with individual tokens larger than 2GiB.
Add the --pcachetrace option to the CLI.
Fix harmless compiler warning in the randomjson.c extension.
Update the regexp extension so that the "-" character may be escaped with a backslash. Forum post [forum:c5e7358f82 | c5e7358f82].
Comment changes clarifying details of the pointer-type parameter. No changes to code.
Fix the rot13.c extension to be deterministic. Add the noop.c extension.
Extend the refactoring into extensions. Clean up stray newlines.
Remove an unused variable from the generate_series implementation.
Fix the sha1() extension function so that it returns actual TEXT instead of a BLOB containing the UTF-8 TEXT. [forum:/forumpost/d15eefea7c|Forum post d15eefea7c]
Add the "showauth" extension in ext/misc.
Fix problem in sqlar_uncompress() when being used to extract symbolic links.
Move the ".output" command into a separate subroutine. Enhance .output so that it is able to capture output in a sqlite3_str object, then compare that captured output we patterns to accomplish tests.
Add the stmtrand() extension function for use in testing.
The tmstmpvfs.c extension should not modify the content of pages going into the WAL file, as that would corrupt the page checksum used for recovery. Instead, only insert timestamp information as content is written into the database file.
Approximately 50 typo fixes, spanning the whole tree, contributed via [forum:006c8fa165083ac3|forum post 006c8fa165083ac3] and individually checked for correctness. Affects only code comments, docs, and a single line of debug output in a test app.
Fix the urifuncs.c extension (used for testing and debugging only) so that the sqlite3_filename_database() SQL function and its siblings correctly handle an invalid schema name passed in as the argument.
Fix a coding mistake in vfstrace.
Enhance the vtablog extension so that it shows the value of sqlite3_vtab_distinct() in xBestIndex, and so that provides the new consume_order_by option that can cause xBestIndex to set the orderByConsumed flag.
Remove the clunky test_windirent.h and test_windirent.c files from src/ and replace them with a much cleaner and more compact ext/misc/windirent.h.
Fix integer overflow problems and error reporting memory leaks in the zipfile extension. [forum:/forumpost/2026-01-13T00:09:06Z|Forum post 2026-01-13T00:09:06Z].
Add bounds checking and error messages and improved comments to the (unused) zorder extension function. [forum:/forumpost/e3f1ede174|Forum post e3f1ede174]