Recent posts

[3.50.2 or above]

#11

General discussions / Re: Legacy header files

Last post by John Z - May 03, 2026, 12:50:44 PM

About the vulnerability -

From https://nvd.nist.gov/vuln/detail/CVE-2025-6965

"There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above."

Then checking winsqlite3.dll in both System32 and SysWOW64 they were updated 1/18/2026 3:53pm to version 3.51.1 so I think means the issue no longer exists, and the dll's are safe to use.

John Z

#12

Assembly discussions / Self modifying code example

Last post by Vortex - May 03, 2026, 12:37:58 PM

Hello,

A simple example of self modifying code. The procedure in the virtual address space is modified : the sub instruction replaced by add.

Code Select Expand

.386
.model flat,stdcall
option casemap:none

include     SMCtest.inc

.data

str1        db '80 + 20 = %u',0

.code

start:

    call    main
    invoke  ExitProcess,0

main PROC USES esi edi ebx

LOCAL pMem:DWORD

    invoke  VirtualAlloc,0,4096,\
            MEM_COMMIT or MEM_RESERVE,\
            PAGE_EXECUTE_READWRITE

    mov     pMem,eax
    mov     edi,eax
    mov     esi,OFFSET Calculate

    mov     ecx,ProcLen
    rep     movsb   ; Copy the procedure Calculate
                    ; to virtual address space

    lea     ecx,[eax+4]

                    ; Modify the procedure

    mov     BYTE PTR [ecx],_ADD

    push    80
    push    20
    call    eax

    invoke  printf,ADDR str1,eax

    invoke  VirtualFree,pMem,0,MEM_RELEASE
    ret

main ENDP

OPTION PROLOGUE:NONE
OPTION EPILOGUE:NONE

Calculate PROC a:DWORD,b:DWORD

    mov     eax,DWORD PTR [esp+8]
    sub     eax,DWORD PTR [esp+4]
    retn    2*4

Calculate ENDP

OPTION PROLOGUE:PrologueDef
OPTION EPILOGUE:EpilogueDef

END start


#13

General discussions / Re: Legacy header files

Last post by TimoVJL - May 03, 2026, 12:25:33 PM

Windows 11, 3.43.2.0
After updates, versio is 3.51.1

#14

General discussions / Re: Legacy header files

Last post by John Z - May 03, 2026, 12:08:49 PM

Thanks Robert!

This is very good to know. 
Personally I use the SQLite3 3.33.0 distribution. https://sqlite.org/
I see an update to 3.53 so I'm behind.

Get the C source code as an amalgamation, version 3.53.0. then just add 4 files to the program.
https://sqlite.org/download.html

John Z

#15

Bug reports / Undefined label issue

Last post by Vortex - May 03, 2026, 11:34:41 AM

Poasm Version 14.10.0 reports an error message while assembling the code below :

Code Select Expand

.386
.model flat,stdcall
option casemap:none

.code

    call    main
    ret

main PROC

    mov     eax,OFFSET sample
    ret

main ENDP

sample:

    db      'This is a test.',0

END


Code Select Expand

\PellesC\bin\poasm.exe /AIA32 sample.asm
sample.asm(12): error: Symbol 'sample' is undefined.
sample.asm(12): error: Symbol 'main.sample' is undefined.

This issue happens when a label is defined after a procedure.

#16

General discussions / Re: Legacy header files

Last post by Robert - May 02, 2026, 11:29:45 PM

There are two header files in folder "Include/win/winsqlite/": winsqlite3.h and winsqlite3ext.h.
But no related .lib files are included in folder "Lib".
Is this a deprecated feature?

I suspect that Pelle did not include the .lib files for those .dlls because there was a security vulnerability.

https://learn.microsoft.com/en-us/answers/questions/5591853/vulnerability-in-winsqlite3-dll

[pope.exe]

#17

General discussions / Re: Legacy header files

Last post by John Z - May 02, 2026, 09:41:01 PM

Hi ander_cc,

A lot of help now 👍👍👍

You can also find the exported functions using:
 C:\Program Files\PellesC\Bin\pope.exe

Attached example shows part of the output for the winsqlite3.dll, copy paste not possible so image is attached.

John Z

#18

General discussions / Re: Legacy header files

Last post by Vortex - May 02, 2026, 09:31:49 PM

Hi ander_cc,

Can you check this GitHub account?

https://github.com/buggins/ddbc/tree/master/libs

sqlite3.lib :

https://github.com/buggins/ddbc/tree/master/libs/win32

https://github.com/buggins/ddbc/tree/master/libs/win64

#19

General discussions / Re: Legacy header files

Last post by TimoVJL - May 02, 2026, 09:16:02 PM

With simple example might be possible to check imports

Code Select Expand

#include <stdio.h>
#include <stdlib.h>
//#include "sqlite3.h"
#include <winsqlite/winsqlite3.h>

#pragma comment(lib, "WinSQLite3.lib")

int __cdecl main(int argc, char **argv)
{
    sqlite3 *db;
    int rc;
    char *szSQL =
        "DROP TABLE IF EXISTS test;"
        "CREATE TABLE IF NOT EXISTS test (id INTEGER NOT NULL PRIMARY KEY, text VARCHAR(100));"
        "INSERT INTO test VALUES (1, 'text1');"
        "SELECT * FROM test;";
    char *pSQL1, *pSQL2;

    printf("lib version: %u\n", sqlite3_libversion_number());
    rc = sqlite3_open("test.db3", &db);
    if (rc == SQLITE_OK)
    {
        sqlite3_stmt *stmt;
        pSQL1 = szSQL;    // at start
        do
        {
            rc = sqlite3_prepare_v2(db, pSQL1, -1, &stmt, (const char**)&pSQL2);
            if (rc == SQLITE_OK)
            {
                int nCols = sqlite3_column_count(stmt);
                if (nCols)
                {
                    int nCol;
                    for (nCol = 0; nCol < nCols; nCol++)
                        printf("%s\t", sqlite3_column_name(stmt, nCol));
                    printf("\n");
                    while ((rc = sqlite3_step(stmt)) == SQLITE_ROW)
                        for (nCol = 0; nCol < nCols; nCol++)
                            printf("%s\t", sqlite3_column_text(stmt, nCol));
                    printf("\n");
                }
                sqlite3_finalize(stmt);
            } else {
                fprintf(stderr, "Error: %s\n", sqlite3_errmsg(db));
                break;
            }
            pSQL1 = pSQL2;    // next statement
        } while (*pSQL2);
        sqlite3_close(db);
    } else {
        fprintf(stderr, "Can't open database: %s\n", sqlite3_errmsg(db));
        sqlite3_close(db);
        return 1;
    }
    return 0;
}
after that just use polib.exe to create import library.
If functions are cdecl., just use polib with dll.
An example import library have only few functions x86

WinSQLite3.def 32-bit

Code Select Expand

library winsqlite3.dll
exports
_sqlite3_libversion_number@0
_sqlite3_open@8
_sqlite3_prepare_v2@20
_sqlite3_column_count@4
_sqlite3_column_name@8
_sqlite3_column_text@8
_sqlite3_step@4
_sqlite3_finalize@4
_sqlite3_errmsg@4
_sqlite3_close@4


#20

General discussions / Re: Legacy header files

Last post by ander_cc - May 02, 2026, 05:12:14 PM

Well I'm far from an expert but I have used a dll in a program.
basically the use follows this:
1)LoadLibrary: Loads the DLL into memory.
2)repeat GetProcAddress: Get a pointers to the exported functions.
3)use the functions:
4)FreeLibrary: Unloads the DLL when done.

A quick web example where the dll contains 1 function:
__declspec(dllexport) int Add(int a, int b) {return a + b};

some code excerpts from one of my actual programs

Hopefully helpful, at least a start -

John Z

Many thanks for your detailed explanation. I will try.