3 ms·
I expect the majority of the vulnerabilities were in the command parser. Which attack vector is gone from the database file.
by moonchild 6y ago
I expect the majority of the vulnerabilities were in the command parser. Which attack vector is gone from the database file.
- yc12340 6y agoAFAIK, SQLite stores database schema as text, so certain subset of parser still has to be invoked on untrusted DDL.