News for hackers. Stuff that matters.

A comment on Remote code execution vulnerability in SQLite. Parent comment

Re:Remote code execution vulnerability in SQLite by jeklj on Friday December 14, 2018 @07:34PM (#18686207)
To be a bit glib, unit tests don’t catch security vulnerabilities. Maybe I’d agree this can happen to any project, but my example might be something more like OpenBSD
[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by hyperman1 on Saturday December 15, 2018 @06:32AM (#18688011)
Why not?

In this specific case, a unit test that checked this integer overflow seeems to prevent the vulnerability.

To be clear: This is not to admonish sqlite. They have taken testing further than any other project i've heard of, except maybe the NASA software that might cost lives if it fails.

[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by hashhar on Saturday December 15, 2018 @07:18AM (#18688107)
Incidentally a lot of NASA tools use SQLite as well from what I have heard.
[ Parent | on HN ]