FS#48225 - [tracker] [sqlite] sqlite 3.11 breaks tracker
Attached to Project:
Arch Linux
Opened by Hussam Al-Tayeb (hussam) - Wednesday, 17 February 2016, 21:50 GMT
Last edited by Andreas Radke (AndyRTR) - Saturday, 20 February 2016, 14:21 GMT
Opened by Hussam Al-Tayeb (hussam) - Wednesday, 17 February 2016, 21:50 GMT
Last edited by Andreas Radke (AndyRTR) - Saturday, 20 February 2016, 14:21 GMT
|
Details
It looks like sqlite 3.11 breaks tracker while the initial
database was created when sqlite 3.11 is installed.
downgrading to 3.10.2 fixes this. I reported it in gnome bugtracker. https://bugzilla.gnome.org/show_bug.cgi?id=762226 In the meantime, please keep sqlite 3.11 in testing for a while. Thank you. |
This task depends upon
Closed by Andreas Radke (AndyRTR)
Saturday, 20 February 2016, 14:21 GMT
Reason for closing: Fixed
Additional comments about closing: use -DSQLITE_ENABLE_FTS3_TOKENIZER=1 in 3.11.0-2
Saturday, 20 February 2016, 14:21 GMT
Reason for closing: Fixed
Additional comments about closing: use -DSQLITE_ENABLE_FTS3_TOKENIZER=1 in 3.11.0-2
"Go to https://www.sqlite.org/releaselog/3_11_0.html and read the
single bullet under "Backwards Compatibility". I think it applies to
you. By fixing this, you will also fix a security issue in your
application."
Backwards Compatibility:
Because of continuing security concerns, the two-argument version of of the seldom-used and little-known fts3_tokenizer() function is disabled unless SQLite is compiled with the SQLITE_ENABLE_FTS3_TOKENIZER.
So I take it we need to enable this compile option. I'll poke the gnome tracker developers.
I rebuilt sqlite with -DSQLITE_ENABLE_FTS3_TOKENIZER (despite the developer warning) and it fixed the tracker issue.
"Comment # 2 on bug 762226 from Carlos Garnacho
We can't just do that without dropping several of our FTS features. The right
fix is updating to fts5, which offers a different method to implement the
custom tokenizer we need.
The only thing you can do in the mean time is compiling your sqlite with
SQLITE_ENABLE_FTS3_TOKENIZER, none of those security concerns apply to Tracker,
although they might concern other applications..."