0
0
mirror of https://github.com/sqlite/sqlite.git synced 2024-11-25 08:59:33 +01:00
sqlite/test/with4.test
drh 713f34ace9 Do not allow parameters or schema references inside of WITH clause of
triggers and views.  This fixes a bug discovered by OSSFuzz and present
since common-table-expressions were first added in 2014-02-03.

FossilOrigin-Name: b918d4b4e546d3903ff20efc3c8ca26dd9761cc8ed9ef7d2799b66ff9ae1ae51
2018-02-15 21:00:37 +00:00

53 lines
1.6 KiB
Plaintext

# 2018-02-15
#
# The author disclaims copyright to this source code. In place of
# a legal notice, here is a blessing:
#
# May you do good and not evil.
# May you find forgiveness for yourself and forgive others.
# May you share freely, never taking more than you give.
#
#***********************************************************************
# This file implements regression tests for SQLite library. The
# focus of this file is testing the WITH clause in TRIGGERs and VIEWs.
#
set testdir [file dirname $argv0]
source $testdir/tester.tcl
set ::testprefix with4
ifcapable {!cte} {
finish_test
return
}
do_execsql_test 100 {
ATTACH ':memory:' AS aux;
CREATE TABLE main.t1(a,b);
CREATE TABLE aux.t2(x,y);
INSERT INTO t1 VALUES(1,2);
INSERT INTO t2 VALUES(3,4);
} {}
do_catchsql_test 110 {
CREATE VIEW v1 AS SELECT * FROM t1, aux.t2;
} {1 {view v1 cannot reference objects in database aux}}
do_catchsql_test 120 {
CREATE VIEW v2 AS WITH v(m,n) AS (SELECT x,y FROM aux.t2) SELECT * FROM t1, v;
} {1 {view v2 cannot reference objects in database aux}}
do_catchsql_test 130 {
CREATE VIEW v2 AS WITH v(m,n) AS (SELECT 5,?2) SELECT * FROM t1, v;
} {1 {parameters are not allowed in views}}
do_catchsql_test 200 {
CREATE TRIGGER r1 AFTER INSERT ON t1 BEGIN
WITH v(m,n) AS (SELECT x,y FROM aux.t2) SELECT * FROM t1, v;
END;
} {1 {trigger r1 cannot reference objects in database aux}}
do_catchsql_test 210 {
CREATE TRIGGER r1 AFTER INSERT ON t1 BEGIN
WITH v(m,n) AS (SELECT 5,?2) SELECT * FROM t1, v;
END;
} {1 {trigger cannot use variables}}
finish_test