Add or correct bounds checking for sqlite dbd backends.

Submitted by: Bojan Smojver <bojan rexursive.com>

* dbd/apr_dbd_sqlite2.c
  (dbd_sqlite_get_entry): Add bounds checking.

* dbd/apr_dbd_sqlite3.c
  (dbd_sqlite3_get_entry): Correct bounds checking on negative values.


git-svn-id: http://svn.apache.org/repos/asf/apr/apr-util/trunk@384327 13f79535-47bb-0310-9956-ffa450edef68

1 files changed, 1 insertions, 1 deletions

diff --git a/dbd/apr_dbd_sqlite3.c b/dbd/apr_dbd_sqlite3.c
index c01891b7..2a2fea83 100644
--- a/dbd/apr_dbd_sqlite3.c
+++ b/dbd/apr_dbd_sqlite3.c
@@ -217,7 +217,7 @@ static const char *dbd_sqlite3_get_entry(const apr_dbd_row_t *row, int n)
 {
     apr_dbd_column_t *column;
     const char *value;
-    if ((n + 1) > row->columnCount) {
+    if ((n < 0) || (n >= row->columnCount)) {
         return NULL;
     }
     column = row->columns[n];