Fix a fts3 typo/bug.

third_party/sqlite/ext/fts3/fts3.c

 /*
 ** 2006 Oct 10
 **
 ** The author disclaims copyright to this source code.  In place of
 ** a legal notice, here is a blessing:
 **
 **    May you do good and not evil.
 **    May you find forgiveness for yourself and forgive others.
 **    May you share freely, never taking more than you give.
 **
@@ skipping 4699 matching lines @@
   */
   if( pReader->nData==0 ){
     dataBufferReset(&pReader->term);
   }else{
     int n, nPrefix, nSuffix;
 
     n = fts3GetVarint32Safe(pReader->pData, &nPrefix, pReader->nData);
     if( !n ) return SQLITE_CORRUPT_BKPT;
     pReader->nData -= n;
     pReader->pData += n;
-    n += fts3GetVarint32Safe(pReader->pData, &nSuffix, pReader->nData);
+    n = fts3GetVarint32Safe(pReader->pData, &nSuffix, pReader->nData);

[Scott Hess - ex-Googler, 2010/07/03 01:37:26]

I believe I complained about that exact line of code ... except it was a problem
with the pData reference.  Gah!

     if( !n ) return SQLITE_CORRUPT_BKPT;
     pReader->nData -= n;
     pReader->pData += n;
     if( nSuffix<0 || nSuffix>pReader->nData ) return SQLITE_CORRUPT_BKPT;
     if( nPrefix<0 || nPrefix>pReader->term.nData ) return SQLITE_CORRUPT_BKPT;
 
     /* Truncate the current term and append suffix data. */
     pReader->term.nData = nPrefix;
     dataBufferAppend(&pReader->term, pReader->pData, nSuffix);
 
@@ skipping 2675 matching lines @@
   sqlite3 *db, 
   char **pzErrMsg,
   const sqlite3_api_routines *pApi
 ){
   SQLITE_EXTENSION_INIT2(pApi)
   return sqlite3Fts3Init(db);
 }
 #endif
 
 #endif /* !defined(SQLITE_CORE) || defined(SQLITE_ENABLE_FTS3) */