As reproduced in sqlcipher/sqlcipher-android-tests#16: calling SQLiteDatabase.rawQuery with a nonsense statement such as "101" or "false" would cause a StringIndexOutOfBoundsException to be thrown. According to the API I would expect some form of a SQLiteException to be thrown.

This has been fixed in AOSP quite a few years ago. I am not sure how easy it is to incorporate the fix due to the divergence in code.