From 5a05c59d4d75c03f23d5fb70feac9f789954bf8a Mon Sep 17 00:00:00 2001
From: drh <>
Date: Sat, 6 Dec 2025 20:41:24 +0000
Subject: [PATCH] In the zipfile extension, only return as many bytes as
 Inflate actually generated.  [forum:/forumpost/761eac3c82|Forum post
 761eac3c82]. Adjust ./configure so that it builds zipfile into testfixture if
 ZLIB is available, so that tests get run on unix platforms.

Upstream: https://sqlite.org/src/info/9766b47beb9ec72f
Upstream: https://github.com/sqlite/sqlite/commit/5a05c59d4d75c03f23d5fb70feac9f789954bf8a
CVE: CVE-2025-70873
[thomas: backport to 3.50.4]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
 shell.c |  2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/shell.c b/shell.c
index de401b89ec..e2640fd874 100644
--- a/shell.c
+++ b/shell.c
@@ -11184,7 +11184,7 @@ static void zipfileInflate(
       if( err!=Z_STREAM_END ){
         zipfileCtxErrorMsg(pCtx, "inflate() failed (%d)", err);
       }else{
-        sqlite3_result_blob(pCtx, aRes, nOut, zipfileFree);
+        sqlite3_result_blob(pCtx, aRes, (int)str.total_out, zipfileFree);
         aRes = 0;
       }
     }