Fix NULL-deref, use-after-free, and lock-misuse bugs in sqlite3_nif.c#342

Merged

warmwaffles merged 18 commits into

elixir-sqlite:mainfrom

mjc:fix/null-deref-segfaults

Feb 25, 2026

Commits on Feb 24, 2026

Add regression tests for exqlite_close, last_insert_rowid, transaction_status
mjc
committed
Fix TOCTOU in exqlite_close: move conn->db NULL check inside lock
mjc
committed
Add regression tests for exqlite_changes, serialize, enable_load_extension, deserialize, set_update_hook
mjc
committed
Fix TOCTOU in exqlite_changes: move conn->db NULL check inside lock
mjc
committed
Add regression test for deserialize lock leak on malloc failure
mjc
committed
Fix missing lock release in exqlite_deserialize on malloc failure
mjc
committed
Add regression tests for statement NULL-dereference
mjc
committed
Add NULL guards in 12 statement functions after release
mjc
committed
Add regression tests for reset and bind_* after release
mjc
committed
Return :invalid_statement in statement NIFs; free buffer on deserialize failure
mjc
committed
Add regression test for concurrent interrupt and close TOCTOU
mjc
committed
Remove conn->db NULL guard from multi_step; fix stale NIF from prior run
mjc
committed
Fix use-after-free in exqlite_interrupt: add interrupt_mutex; NULL guard execute
mjc
committed
mix format
mjc
committed
clang-format sqlite3_nif.c
mjc
committed
Add regression tests for errmsg, bind after release, and deserialize database_name
mjc
committed
Address PR review feedback: errmsg NULL guards, bind/2 error handling, deserialize database_name, interrupt_mutex ordering
mjc
committed

Commits on Feb 25, 2026

Clean up verbose comments in tests and C code
mjc
committed