Heap Buffer Overflow in sqlite extension

[YuanchengJiang]

Heap Buffer Overflow in sqlite extension

[nielsdos]

If you encounter something related to buffer overreads or overflows, please consider reporting them in private.
We can always decide there if something is okay to be public or not.
This particular case is unlikely to be exploitable as it's an overread for short file names (i.e. $GLOBALS[array_rand($GLOBALS)] resolves to Array and so the filename string is overread).

[devnexen]

Using proper string comparison instead of memcmp should do it I think.