News for hackers. Stuff that matters.

A comment on Zlib Critical Vulnerability. Parent comment

Re:Zlib Critical Vulnerability by SahAssar on Saturday October 15, 2022 @04:28AM (#33212943)
> It's a mess, only comparable to openssl, sqlite and bash.

Why do you consider sqlite abandoned or a mess?

[ Parent | on HN ]
Re:Zlib Critical Vulnerability by rurban on Saturday October 15, 2022 @03:25PM (#33217788)
because is almost impossible to fix, harden or make secure. it's not just the broken overall architecture, which eg enables write on read, also it's internal code. eg the various attempts to get FTS. it's worse than openssl, which gets all the FLAC
[ Parent | on HN ]
Re:Zlib Critical Vulnerability by SahAssar on Saturday October 15, 2022 @06:58PM (#33219427)
> because is almost impossible to fix, harden or make secure.

I'd like some more context on this. Especially since it is used in many security-critical contexts currently.

[ Parent | on HN ]
Re:Zlib Critical Vulnerability by rurban on Sunday October 16, 2022 @06:59AM (#33222696)
https://github.com/rurban/hardsqlite

I gave up on it

[ Parent | on HN ]