News for hackers. Stuff that matters.

A comment on What If OpenDocument Used SQLite?.

Re:What If OpenDocument Used SQLite? by gungoman on Thursday November 02, 2017 @01:53AM (#15608145)
Penetration testers will have a field day with this if it happens.
[ Parent | on HN ]
Re:What If OpenDocument Used SQLite? by SQLite on Thursday November 02, 2017 @01:38PM (#15612447)
Pen-testers have been hammering hard on SQLite for years. Attacks against SQLite are not as easy as you imagine.

Pen-testers do still occasionally find minor problems. See https://www.sqlite.org/src/info/04925dee41a21ffc for the latest example. But generally speaking, it is safe to open an SQLite database received from an untrusted source. If you are extra paranoid, activate the "PRAGMA cell_size_check=ON" feature and/or run "PRAGMA integrity_check" to verify the database before use.

[ Parent | on HN ]
Re:What If OpenDocument Used SQLite? by jnwatson on Thursday November 02, 2017 @02:47AM (#15608336)
Why? SQLite has been put in safety critical systems and has the best test plan I've ever seen for an open source project.
[ Parent | on HN ]
Re:What If OpenDocument Used SQLite? by rkangel on Thursday November 02, 2017 @09:16AM (#15610090)
It has the best test plan I've seen for any pure software product, and I'm including both medical and safety critical stuff.
[ Parent | on HN ]