News for hackers. Stuff that matters.

A comment on Select Code_execution from * Using SQLite; (2019). Parent comment

Re:Select Code_execution from * Using SQLite; (2019) by juskrey on Sunday June 14, 2020 @04:07AM (#23515920)
Formal methods have formal assumptions.
[ Parent | on HN ]
Re:Select Code_execution from * Using SQLite; (2019) by Quekid5 on Thursday June 18, 2020 @03:39PM (#23566952)
Yes? A huge portion of what a database does is amenable to formal methods.

You can even come up with a reasonable rudimentary formal model of a physical machine/CPU and check against that. Sure, the model of the machine may be wrong in subtle ways, but when you discover that, you fix it and recheck your model of a database against the updated model of a physical machine.

That said... don't use a language with trivially allows for out-of-bounds indexing, etc. (SQLite was started when there were really few other good options, so that's understandable.)

[ Parent | on HN ]