Sync changes to SLFO-1.2 branch

- Update to version 3.50.3:
  * Fix a possible memory error that can occur if a query is made
    against against FTS5 index that has been deliberately corrupted
    in a very specific way.
  * Fix the parser so that it ignored SQL comments in all places of
    a CREATE TRIGGER statement. This resolves a problem that was
    introduced by the introduction of the
    SQLITE_DBCONFIG_ENABLE_COMMENTS feature in version 3.49.0.
  * Fix an incorrect answer due to over-optimization of an AND
    operator.

OBS-URL: https://build.opensuse.org/request/show/1294396
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sqlite3?expand=0&rev=166

sqlite-3.49.0-fix-lemon-missing-cflags.patch

@@ -0,0 +1,25 @@
+From 0d7a62843abaa422130c78f6f69b996ee71a3c10 Mon Sep 17 00:00:00 2001
+From: Ales Nezbeda <anezbeda@redhat.com>
+Date: Thu, 27 Feb 2025 14:04:22 +0100
+Subject: [PATCH] Fix lemon not using CFLAGS
+
+---
+ main.mk | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/main.mk b/main.mk
+index 808f925..38749c8 100644
+--- a/main.mk
++++ b/main.mk
+@@ -1058,7 +1058,7 @@ libsqlite3.SO = libsqlite3$(T.dll)
+ # Rules to build the LEMON compiler generator
+ #
+ lemon$(B.exe): $(MAKE_SANITY_CHECK) $(TOP)/tool/lemon.c $(TOP)/tool/lempar.c
+-	$(B.cc) -o $@ $(TOP)/tool/lemon.c
++	$(T.cc) -o $@ $(TOP)/tool/lemon.c
+ 	cp $(TOP)/tool/lempar.c .
+ 
+ # Rules to build the program that generates the source-id
+-- 
+2.48.1
+

sqlite-3.6.23-lemon-system-template.patch

@@ -0,0 +1,11 @@
+--- a/tool/lemon.c
++++ b/tool/lemon.c
+@@ -3686,6 +3686,8 @@
+     tpltname = buf;
+   }else if( access(templatename,004)==0 ){
+     tpltname = templatename;
++  }else if( access("/usr/share/lemon/lempar.c", R_OK)==0){
++    tpltname = "/usr/share/lemon/lempar.c";
+   }else{
+     toFree = tpltname = pathsearch(lemp->argv[0],templatename,0);
+   }

sqlite-doc-3460000.zip

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5ec9651bbfab7d3bf0a295f4d9be7d861e9968ea993438f05b579d8a75fe1e6f
-size 10842823

sqlite-src-3460000.zip

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:070362109beb6899f65797571b98b8824c8f437f5b2926f88ee068d98ef368ec
-size 14275927

sqlite3-rpmlintrc

@@ -0,0 +1,2 @@
+# Driver template for the LEMON parser generator
+addFilter("devel-file-in-non-devel-package /usr/share/lemon/lempar.c")

sqlite3.changes

@@ -1,3 +1,279 @@
+-------------------------------------------------------------------
+Mon Aug 11 16:04:48 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to version 3.50.4:
+  * Fix two long-standings cases of the use of uninitialized
+    variables in obscure circumstances. 
+
+-------------------------------------------------------------------
+Thu Jul 17 16:17:25 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to version 3.50.3:
+  * Fix a possible memory error that can occur if a query is made
+    against against FTS5 index that has been deliberately corrupted
+    in a very specific way.
+  * Fix the parser so that it ignored SQL comments in all places of
+    a CREATE TRIGGER statement. This resolves a problem that was
+    introduced by the introduction of the
+    SQLITE_DBCONFIG_ENABLE_COMMENTS feature in version 3.49.0.
+  * Fix an incorrect answer due to over-optimization of an AND
+    operator.
+
+-------------------------------------------------------------------
+Tue Jul  1 12:04:55 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to 3.50.2:
+  * Fix the concat_ws() SQL function so that it includes empty
+    strings in the concatenation.
+  * Avoid writing frames with no checksums into the wal file if a
+    savepoint is rolled back after dirty pages have already been
+    spilled into the wal file.
+  * Fix the Bitvec object to avoid stack overflow when the
+    database is within 60 pages of its maximum size.
+  * Fix a problem with UPDATEs on fts5 tables that contain BLOB
+    values.
+  * Fix an issue with transitive IS constraints on a RIGHT JOIN.
+  * CVE-2025-6965, bsc#1246597:
+    Raise an error early if the number of aggregate terms in a
+    query exceeds the maximum number of columns, to avoid
+    downstream assertion faults.
+  * Ensure that sqlite3_setlk_timeout() holds the database mutex.
+
+-------------------------------------------------------------------
+Mon Jun  9 07:56:06 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Update to 3.50 (3.50.1):
+  * Improved handling and robust output of control characters
+  * sqlite3_rsync no longer requires WAL mode and needs less
+    bandwidth
+  * Bug fixes and optimized JSON handling
+  * Performance optimizations and developer visible fixes
+
+-------------------------------------------------------------------
+Wed May  7 13:09:13 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to release 3.49.2:
+  * Fix a bug in the NOT NULL optimization of version 3.40.0 that
+    can lead to a memory error if abused.
+  * Fix the count-of-view optimization so that it does not give an
+    incorrect answer for a DISTINCT query.
+  * Fix a possible incorrect answer that can result if a UNIQUE
+    constraint of a table contains the PRIMARY KEY column and that
+    UNIQUE constraint is used by an IN operator.
+  * Fix obscure problems with the generate_series() extension
+    function.
+  * Incremental improvements to the configure/make.
+
+-------------------------------------------------------------------
+Thu Apr 17 09:33:26 UTC 2025 - Martin Hauke <mardnh@gmx.de>
+
+- Add subpackage for the lemon parser generator.
+- Add patches:
+  * sqlite-3.49.0-fix-lemon-missing-cflags.patch
+  * sqlite-3.6.23-lemon-system-template.patch
+
+-------------------------------------------------------------------
+Tue Mar 11 21:34:05 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Mark build recipe as POSIX-sh-incompatible
+- Run mkdir/rm with verbose mode for the build log
+
+-------------------------------------------------------------------
+Tue Feb 18 16:21:23 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to release 3.49.1:
+  * Improve portability of makefiles and configure scripts.
+  * CVE-2025-29087, CVE-2025-3277, bsc#1241020:
+    Fix a bug in the concat_ws() function, introduced in version
+    3.44.0, that could lead to a memory error if the separator
+    string is very large (hundreds of megabytes).
+  * CVE-2025-29088, bsc#1241078: Enhanced the
+    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
+    against misuse.
+
+-------------------------------------------------------------------
+Thu Feb  6 17:58:46 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to release 3.49.0:
+  * Enhancements to the query planner:
+    - Improve the query-time index optimization so that it works on
+      WITHOUT ROWID tables.
+    - Better query plans for large star-query joins. This fixes
+      three different performance regressions that were reported
+      on the SQLite Forum.
+    - When two or more queries have the same estimated cost, use
+      the one with the fewer bytes per row.
+  * Enhance the iif() SQL function so that it can accept any number
+    of arguments greater than or equal to two.
+  * Enhance the session extension so that it works on databases
+    that make use of generated columns.
+  * Omit the SQLITE_USE_STDIO_FOR_CONSOLE compile-time option which
+    was not implemented correctly and never worked right. In its place
+    add the SQLITE_USE_W32_FOR_CONSOLE_IO compile-time option. This
+    option applies to command-line tools like the CLI only, not to the
+    SQLite core. It causes Win32 APIs to be used for console I/O
+    instead of stdio. This option affects Windows builds only.
+  * Three new options to sqlite3_db_config(). All default "on".
+    SQLITE_DBCONFIG_ENABLE_ATTACH_CREATE
+    SQLITE_DBCONFIG_ENABLE_ATTACH_WRITE
+    SQLITE_DBCONFIG_ENABLE_COMMENTS 
+
+-------------------------------------------------------------------
+Thu Jan 16 10:39:29 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Re-enable SONAME which got disabled by default in 3.48.0.
+  * https://www.sqlite.org/src/forumpost/5a3b44f510df8ded
+  * https://sqlite.org/forum/forumpost/ab8f15697a  
+
+-------------------------------------------------------------------
+Tue Jan 14 15:44:26 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to release 3.48.0:
+  * Improved EXPLAIN QUERY PLAN output for covering indexes.
+  * Allow a two-argument version of the iif() SQL function.
+  * Also allow if() as an alternative spelling for iif().
+  * Add the ".dbtotxt" command to the CLI.
+  * Add the SQLITE_IOCAP_SUBPAGE_READ property to the
+    xDeviceCharacteristics method of the sqlite3_io_methods object.
+  * Add the SQLITE_PREPARE_DONT_LOG option to sqlite3_prepare_v3()
+    that prevents warning messages being sent to the error log if
+    the SQL is ill-formed. This allows sqlite3_prepare_v3() to be
+    used to do test compiles of SQL to check for validity without
+    polluting the error log with false messages.
+  * Increase the minimum allowed value of SQLITE_LIMIT_LENGTH from
+    1 to 30.
+  * Added the SQLITE_FCNTL_NULL_IO file control.
+  * Extend the FTS5 auxiliary API xInstToken() to work with prefix
+    queries via the insttoken configuration option and the
+    fts5_insttoken() SQL function.
+  * Increase the maximum number of arguments to an SQL function
+    from 127 to 1000.
+  * Obsoletes sqlite3-6216bfcb.patch .
+
+-------------------------------------------------------------------
+Mon Dec 16 15:40:43 UTC 2024 - Reinhard Max <max@suse.com>
+
+- Add sqlite3-6216bfcb.patch to fix a test suite regression in
+  3.47.0 on s390x. Only the test was broken, not the code itself.
+  https://sqlite.org/forum/forumpost/7b2bab04c5
+
+-------------------------------------------------------------------
+Mon Dec  9 11:26:23 UTC 2024 - Reinhard Max <max@suse.com>
+
+- Update to release 3.47.2:
+  * Fix a problem in text-to-floating-point conversion that affects
+    text values where the first 16 significant digits are
+    '1844674407370955'. This issue was introduced in 3.47.0 and
+    only arises on x64 and i386 hardware.
+  * Other minor bug fixes.
+- Enable the session extension, because NodeJS 22 needs it.
+
+-------------------------------------------------------------------
+Wed Nov 27 10:09:03 UTC 2024 - Reinhard Max <max@suse.com>
+
+- Update to release 3.47.1:
+  * Fix the makefiles so that they once again honored DESTDIR for
+    the "install" target.
+  * Add the SQLITE_IOCAP_SUBPAGE_READ capability to the VFS, to
+    work around issues on some non-standard VFSes caused by making
+    SQLITE_DIRECT_OVERFLOW_READ the default in version 3.45.0.
+  * Fix incorrect answers to certain obscure IN queries caused by
+    new query optimizations added in the 3.47.0 release.
+  * Other minor bug fixes.
+
+-------------------------------------------------------------------
+Tue Oct 22 16:05:19 UTC 2024 - Reinhard Max <max@suse.com>
+
+- Update to release 3.47.0:
+  * Allow arbitrary expressions in the second argument to the RAISE
+    function.
+  * If the RHS of the ->> operator is negative, then access array
+    elements counting from the right.
+  * Fix a problem with rolling back hot journal files in the
+    seldom-used unix-dotfile VFS.
+  * FTS5 tables can now be dropped even if they use a non-standard
+    tokenizer that has not been registered.
+  * Fix the group_concat() aggregate function so that it returns an
+    empty string, not a NULL, if it receives a single input value
+    which is an empty string.
+  * Enhance the generate_series() table-valued function so that it
+    is able to recognize and use constraints on its output value.
+    Preupdate hooks now recognize when a column added by ALTER
+    TABLE ADD COLUMN has a non-null default value.
+  * Improved reuse of subqueries associated with the IN operator,
+    especially when the IN operator has been duplicated due to
+    predicate push-down.
+  * Use a Bloom filter on subqueries on the right-hand side of the
+    IN operator, in cases where that seems likely to improve
+    performance.
+  * Ensure that queries like "SELECT func(a) FROM tab GROUP BY 1"
+    only invoke the func() function once per row.
+  * No attempt is made to create automatic indexes on a column
+    that is known to be non-selective because of its use in other
+    indexes that have been analyzed.
+  * Adjustments to the query planner so that it produces better
+    plans for star queries with a large number of dimension
+    tables.
+  * Add the "order-by-subquery" optimization, that seeks to
+    disable sort operations in outer queries if the desired order
+    is obtained naturally due to ORDER BY clauses in subqueries. 
+  * The "indexed-subtype-expr" optimization strives to use
+    expressions that are part of an index rather than recomputing
+    the expression based on table values, as long as the query
+    planner can prove that the subtype of the expression will
+    never be used.
+  * Miscellaneous coding tweaks for faster runtimes.
+  * Add the experimental sqlite3_rsync program.
+  * Add extension functions median(), percentile(),
+    percentile_cont(), and percentile_disc() to the CLI.
+  * Add the .www dot-command to the CLI.
+  * The sqlite3_analyzer utility now provides a break-out of
+    statistics for WITHOUT ROWID tables.
+  * The sqldiff utility avoids creating an empty database if its
+    second argument does not exist.
+  * Enhance the sqlite_dbpage table-valued function such that
+    INSERT can be used to increase or decrease the size of the
+    database file.
+  * SQLite no longer makes any use of the "long double" data type,
+    as hardware support for long double is becoming less common
+    and long double creates challenges for some compiler tool
+    chains. Instead, SQLite uses Dekker's algorithm when extended
+    precision is needed.
+  * The TCL Interface for SQLite supports TCL9. Everything
+    probably still works for TCL 8.5 and later, though this is not
+    guaranteed. Users are encouraged to upgrade to TCL9.
+  * Fix a corruption-causing bug in the JavaScript "opfs" VFS.
+    Correct "mode=ro" handling for the "opfs" VFS.  Work around a
+    couple of browser-specific OPFS quirks.
+  * Add the fts5_tokenizer_v2 API and the locale=1 option, for
+    creating custom locale-aware tokenizers and fts5 tables that
+    may take advantage of them.
+  * Add the contentless_unindexed=1 option, for creating
+    contentless fts5 tables that store the values of any UNINDEXED
+    columns persistently in the database.
+  * Allow an FTS5 table to be dropped even if it uses a custom
+    tokenizer whose implementation is not available.
+
+-------------------------------------------------------------------
+Tue Sep 24 11:36:12 UTC 2024 - Reinhard Max <max@suse.com>
+
+- Update to release 3.46.1:
+  * Improved robustness while parsing the tokenize= arguments in
+    FTS5.
+  * Enhancements to covering index prediction in the query planner.
+  * Do not let the number of terms on a VALUES clause be limited by
+    SQLITE_LIMIT_COMPOUND_SELECT, even if the VALUES clause
+    contains elements that appear to be variables due to
+    double-quoted string literals.
+  * Fix the window function version of group_concat() so that it
+    returns an empty string if it has one or more empty string
+    inputs.
+  * In FTS5 secure-delete mode, fix false-positive integrity-check
+    reports about corrupt indexes.
+  * Syntax errors in ALTER TABLE should always return SQLITE_ERROR.
+    In some cases, they were formerly returning SQLITE_INTERNAL.
+  * Other minor fixes.
+
 -------------------------------------------------------------------
 Thu May 23 19:21:24 UTC 2024 - Reinhard Max <max@suse.com>
 

sqlite3.spec

@@ -1,7 +1,8 @@
 #
 # spec file for package sqlite3
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,21 +17,25 @@
 #
 
 
+%define _buildshell /bin/bash
 %define oname sqlite
-%define tarversion 3460000
+%define tarversion 3500400
-%define docversion 3460000
+%define docversion 3500400
 %bcond_with icu
 %bcond_without check
 Name:           sqlite3
-Version:        3.46.0
+Version:        3.50.4
 Release:        0
 Summary:        Embeddable SQL Database Engine
 License:        SUSE-Public-Domain
 Group:          Productivity/Databases/Servers
 URL:            https://www.sqlite.org/
-Source0:        https://www.sqlite.org/2023/sqlite-src-%{tarversion}.zip
+Source0:        https://www.sqlite.org/2025/sqlite-src-%{tarversion}.zip
 Source1:        baselibs.conf
-Source2:        https://www.sqlite.org/2023/sqlite-doc-%{docversion}.zip
+Source2:        https://www.sqlite.org/2025/sqlite-doc-%{docversion}.zip
+Source99:       %{name}-rpmlintrc
+Patch0:         sqlite-3.6.23-lemon-system-template.patch
+Patch1:         sqlite-3.49.0-fix-lemon-missing-cflags.patch
 BuildRequires:  automake
 BuildRequires:  libtool
 BuildRequires:  pkgconfig
@@ -66,7 +71,7 @@ application that supports the Qt database plug-ins.
 
 %package -n libsqlite3-0
 Summary:        Shared libraries for the Embeddable SQL Database Engine
-Group:          Development/Libraries/C and C++
+Group:          System/Libraries
 
 %description -n libsqlite3-0
 This package contains the shared libraries for the Embeddable SQL
@@ -122,13 +127,26 @@ Group:          Documentation/Other
 BuildArch:      noarch
 
 %description doc
-
 Contains HTML documentation for SQLite: SQL Syntax, C/C++ API and
 other documentation found on sqlite.org. The files can be found in
 %{_docdir}/%{name}-doc.
 
+%package -n lemon
+Summary:        A parser generator
+
+%description -n lemon
+Lemon is an LALR(1) parser generator for C or C++. It does the same
+job as bison and yacc. But lemon is not another bison or yacc
+clone. It uses a different grammar syntax which is designed to reduce
+the number of coding errors. Lemon also uses a more sophisticated
+parsing engine that is faster than yacc and bison and which is both
+reentrant and thread-safe. Furthermore, Lemon implements features
+that can be used to eliminate resource leaks, making is suitable for
+use in long-running programs such as graphical user interfaces or
+embedded controllers.
+
 %prep
-# Version and %tarversion need to match, but %docversion might be different,
+# Version and %%tarversion need to match, but %%docversion might be different,
 IFS=. read a b c d <<< "%version"
 if [ "%tarversion" != $(printf "%1d%02d%02d%02d" $a $b $c $d) ]
 then
@@ -136,7 +154,7 @@ then
 	exit 1
 fi
 
-%autosetup -p0 -n sqlite-src-%{tarversion} -a2
+%autosetup -p1 -n sqlite-src-%{tarversion} -a2
 
 rm -v sqlite-doc-%{docversion}/releaselog/current.html
 ln -sv `echo %{docversion} | sed "s/\./_/g"`.html sqlite-doc-%{docversion}/releaselog/current.html
@@ -145,7 +163,8 @@ cmp sqlite-doc-%{docversion}/fileformat{,2}.html && ln -sf fileformat.html sqlit
 
 %build
 export TCLLIBDIR=%tcl_archdir/sqlite%version
-export LIBS="$LIBS -lm %{?with_icu:-licuuc -licui18n}"
+export CC=gcc
+export CC_FOR_BUILD=gcc
 export CFLAGS="%{optflags} \
 	-DSQLITE_ENABLE_API_ARMOR \
 	-DSQLITE_ENABLE_COLUMN_METADATA \
@@ -168,13 +187,15 @@ export CFLAGS="%{optflags} \
 	-DSQLITE_STRICT_SUBTYPE=1 \
 	"
 %configure \
+  --soname=legacy \
   --disable-static \
   --enable-readline \
   --enable-fts3 \
   --enable-fts4 \
   --enable-fts5 \
   --enable-update-limit \
-  --enable-rtree
+  --enable-rtree \
+  --enable-session
 %make_build sqlite3.c
 %make_build
 
@@ -185,15 +206,15 @@ export CFLAGS="%{optflags} \
 
 %install
 %make_install
-#mkdir -p %{buildroot}/%{_mandir}/man{1,n}/
+install -Dpvm 0644 -t %{buildroot}/%{_mandir}/man1 sqlite3.1
-install -Dp -m 0644 -t %{buildroot}/%{_mandir}/man1 sqlite3.1
+install -Dpvm 0644 -t %{buildroot}/%{_mandir}/mann autoconf/tea/doc/sqlite3.n
-install -Dp -m 0644 -t %{buildroot}/%{_mandir}/mann autoconf/tea/doc/sqlite3.n
+install -Dpvm 0755 -t %{buildroot}%{_bindir} lemon
+install -Dpvm 0644 -t %{buildroot}%{_datadir}/lemon tool/lempar.c
 # tcl bindings are provided by tcl itself
-#rm -rf %{buildroot}%{_libdir}/tcl/tcl8.?/sqlite3*
+#rm -rf %%{buildroot}%%{_libdir}/tcl/tcl8.?/sqlite3*
 find %{buildroot} -type f -name "*.la" -delete -print
 
-%post -n libsqlite3-0 -p /sbin/ldconfig
+%ldconfig_scriptlets -n libsqlite3-0
-%postun -n libsqlite3-0 -p /sbin/ldconfig
 
 %files
 %{_bindir}/sqlite3
@@ -215,4 +236,8 @@ find %{buildroot} -type f -name "*.la" -delete -print
 %files doc
 %doc sqlite-doc-%{docversion}/*
 
+%files -n lemon
+%{_bindir}/lemon
+%{_datadir}/lemon
+
 %changelog