CVE-2025-70873.patch

From 2190461436936c805ee345e7c67e2aec3b8e8ad2 Mon Sep 17 00:00:00 2001
From: AllSpark <allspark@microsoft.com>
Date: Fri, 17 Apr 2026 12:05:16 +0000
Subject: [PATCH] zipfile: return only bytes produce by inflate; build flag for
 zlib in testfixture if available

Signed-off-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Upstream-reference: AI Backport of https://github.com/sqlite/sqlite/commit/5a05c59d4d75c03f23d5fb70feac9f789954bf8a.patch
---
 shell.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/shell.c b/shell.c
index e357f9e..e3fcb83 100644
--- a/shell.c
+++ b/shell.c
@@ -9543,7 +9543,7 @@ static void zipfileInflate(
       if( err!=Z_STREAM_END ){
         zipfileCtxErrorMsg(pCtx, "inflate() failed (%d)", err);
       }else{
-        sqlite3_result_blob(pCtx, aRes, nOut, zipfileFree);
+        sqlite3_result_blob(pCtx, aRes, (int)str.total_out, zipfileFree);
         aRes = 0;
       }
     }
-- 
2.45.4