sqlite3 Cursor NULL-deref via reentrant execute() inside a text_factory/converter during fetch

Bug report

Bug description:

import sqlite3
con = sqlite3.connect(":memory:")
con.execute("CREATE TABLE t(a TEXT, b TEXT)")
con.execute("INSERT INTO t VALUES ('first', 'second')")
cur = con.cursor()
def btf(data):
    try:
        cur.execute("SELECT 1")            
    except sqlite3.ProgrammingError:
        pass                              
    return bytes(data).decode()
con.text_factory = btf
cur.execute("SELECT a, b FROM t")
print(cur.fetchone())                  

Modules/_sqlite/cursor.c:402:23: runtime error: member access within null pointer of type 'struct pysqlite_Statement'
    #0 _pysqlite_fetch_one_row Modules/_sqlite/cursor.c:402
    #1 pysqlite_cursor_iternext Modules/_sqlite/cursor.c:1155
    #2 pysqlite_cursor_fetchone_impl Modules/_sqlite/cursor.c:1206
    #3 pysqlite_cursor_fetchone Modules/_sqlite/clinic/cursor.c.h:169

CPython versions tested on:

CPython main branch

Operating systems tested on:

Linux

Linked PRs

• gh-157578

从 Modules/_sqlite/cursor.c 开始，尤其是 402 行附近的 _pysqlite_fetch_one_row，并使用所示的 text_factory 回调在 sanitizer 下复现该报告。跟踪可重入的 cur.execute() 如何在获取过程中影响该语句；完成的标准是复现器不再触发空指针解引用，并在现有的关联工作旁添加适当的覆盖率。