News for hackers. Stuff that matters.
Re:What If OpenDocument Used SQLite? (2014) by moonchild on Friday December 18, 2020 @12:52AM (#25464292)
I expect the majority of the vulnerabilities were in the command parser. Which attack vector is gone from the database file.
Re:What If OpenDocument Used SQLite? (2014) by yc12340 on Friday December 18, 2020 @03:00AM (#25464882)
AFAIK, SQLite stores database schema as text, so certain subset of parser still has to be invoked on untrusted DDL.