Do we need a security advisory for the sqlite update? (https://github.com/osquery/osquery/issues/7080)
I’m not really sure how to test a reproduce case. It looks like it, if we were effected, we should see a crash with:
Copy code
CREATE TABLE t1(a, b);
CREATE TABLE t2(x, y);
INSERT INTO t1 VALUES('a', 'b');
SELECT min(b), (
SELECT x FROM t2 WHERE a=2 GROUP BY y HAVING 0
) FROM t1;
But I’m not sure what that should produce. It doesn’t seem to crash