Stranger Strings: An exploitable flaw in SQLite

Re:Stranger Strings: An exploitable flaw in SQLite by ghoward on Tuesday October 25, 2022 @11:27AM (#33331896)

I said this before [1], but one severe CVE in 20 years is no reason to rewrite SQLite in a language that has no compiler for some of the platforms it is deployed on.

Sure, write new stuff in Rust, but SQLite needs to stay in C at this point.

[1]: https://news.ycombinator.com/item?id=33331841

[ Parent | on HN ]

Re:Stranger Strings: An exploitable flaw in SQLite by zimpenfish on Tuesday October 25, 2022 @05:05PM (#33336177)

> no reason to rewrite SQLite in [Rust]

I would like them to try, though, because I suspect, barring a Bellard Event, no-one will be able to get close to SQLite's functionality[1], reliability, etc., in a new Rust implementation within 5 years (possibly even 10 years.)

[1] including being able to load extensions, integrate into basically everything as library, etc.

[ Parent | on HN ]

Re:Stranger Strings: An exploitable flaw in SQLite by ghoward on Tuesday October 25, 2022 @07:44PM (#33337742)

If there's no way to get close to it in a certain amount of time by starting from scratch, chances are there's no chance to do it with a rewrite in the same amount of time.

And again, SQLite is used in places that Rust has no compiler for. This is a hard constraint that precludes using Rust.

[ Parent | on HN ]