Stranger Strings: An exploitable flaw in SQLite

Re:Stranger Strings: An exploitable flaw in SQLite by hulitu on Tuesday October 25, 2022 @03:39PM (#33335177)

> Tests increase your confidence that code is correct, and they are much cheaper to do that formal verification,

Your confidence as SW engineer. The purpose of a test is to look for unexpected behaviour, not for expected behaviour.

[ Parent | on HN ]

Re:Stranger Strings: An exploitable flaw in SQLite by RHSeeger on Wednesday October 26, 2022 @01:21PM (#33346709)

And to be specific, they generally look for _known_ unexpected behavior; in that you need to have a test for it.

Though clearly there's still unknowns, like when you're throwing random data at an api to see if you can find bugs. But even still, you know what _ways_ you're doing that. Tests generally won't turn up things nobody has thought to test.

[ Parent | on HN ]