[sqlite] Security issues in SQLite

2015-03-23 Thread Saurav Sarkar
Thanks a lot Richard for your inputs. the link indeed looks positive enough :). Would like to know if anyone else has gone through similar experiences . Best Regards, Saurav On Mon, Mar 23, 2015 at 5:26 PM, Richard Hipp wrote: > On 3/23/15, Saurav Sarkar wrote: > > Hi All, > > > > We use

[sqlite] Security issues in SQLite

2015-03-23 Thread Saurav Sarkar
Hi All, We use SQLite in our application. Ours is an windows store application internally uses SQlite to store data (embedded). I use SQLitePCL library which is a C# .NET based library I was asked to perform Fortify scans on the SQLite code of 3.8.8.3 I used the amalgamation code. Since it is

[sqlite] Problem: you can delete a virtual table with open statements and then SEGV

2015-03-23 Thread Roger Binns
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This was originally reported as a problem in APSW (Python SQLite wrapper): https://github.com/rogerbinns/apsw/issues/184 The important bits are that a cursor (sqlite3_stmt) is created, and step called once, but *not* reset or finalised:

[sqlite] Security issues in SQLite

2015-03-23 Thread R.Smith
On 2015-03-23 01:59 PM, Saurav Sarkar wrote: > Thanks a lot Richard for your inputs. > > the link indeed looks positive enough :). > > Would like to know if anyone else has gone through similar experiences . Often. Just to add - many times people have posted here about some or other static

[sqlite] Security issues in SQLite

2015-03-23 Thread Simon Slavin
On 23 Mar 2015, at 11:59am, Saurav Sarkar wrote: > Thanks a lot Richard for your inputs. > > the link indeed looks positive enough :). > > Would like to know if anyone else has gone through similar experiences . SQLite depends on people calling certain library routines in a certain way.

[sqlite] 55c21521 causes build break on older GCC

2015-03-23 Thread Joe Prostko
On Thu, Mar 19, 2015 at 11:29 PM, Joe Prostko wrote: > In any case, this is more an FYI than me asking for a fix, as Fossil and SQLite can be built just fine using our GCC 4 compiler. That said, if SQLite is expected to build with older GCC compilers, then it would affect other platforms as

[sqlite] Query help

2015-03-23 Thread Martin Engelschalk
Sorry, i was too fast. Correction SELECT engine,coalesce(groupname,'*') as groupname,databasename,key,value FROM EnginePreferences left join groups on (groups.groupid = EnginePreferences.groupid); OR SELECT engine,groupname,databasename,key,value FROM EnginePreferences left join

[sqlite] Query help

2015-03-23 Thread Martin Engelschalk
Hi, SELECT engine,coalesce(groupname,*) as groupname,databasename,key,value FROM EnginePreferences left join groups on (groups.groupid = EnginePreferences.groupid); OR SELECT engine,coalesce(groupname,*) as groupname,databasename,key,value FROM EnginePreferences left join (select

[sqlite] Query help

2015-03-23 Thread Marco Bambini
I have a table EnginePreference: CREATE TABLE EnginePreferences (engine TEXT COLLATE NOCASE, databasename TEXT COLLATE NOCASE, key TEXT COLLATE NOCASE, value TEXT, groupid INTEGER, UNIQUE(engine,databasename,key)) and a table Groups: CREATE TABLE Groups (groupid INTEGER PRIMARY KEY, groupname

[sqlite] Security issues in SQLite

2015-03-23 Thread Richard Hipp
On 3/23/15, Saurav Sarkar wrote: > Hi All, > > We use SQLite in our application. Ours is an windows store application > internally uses SQlite to store data (embedded). I use SQLitePCL library > which is a C# .NET based library > > I was asked to perform Fortify scans on the SQLite code of

[sqlite] What is wrong with this simple SQL?

2015-03-23 Thread Hick Gunter
The sub-select is within an "inner namespace" to the whole query. You are free to reference fields defined in all tables occuring in the subselect's FROM list IN ADDITION TO any fields defined in tables occurring in the main query's FROM list. This is a requirement for correlated subqueries.

[sqlite] Query times vary between 0.2 s and 30 s for very

2015-03-23 Thread Hick Gunter
SQLite creates an ephemeral table for the IN list,giving O(log n) performance for lookups. >-Urspr?ngliche Nachricht- >Von: James K. Lowden [mailto:jklowden at schemamania.org] >Gesendet: Samstag, 21. M?rz 2015 20:43 >An: sqlite-users at mailinglists.sqlite.org >Betreff: Re: [sqlite]

[sqlite] What is wrong with this simple SQL?

2015-03-23 Thread Bart Smissaert
Well, select column A from table B, kind of implies that that column A can only come from table B. This is what most people would think I would guess. RBS On Sun, Mar 22, 2015 at 10:27 PM, Igor Tandetnik wrote: > On 3/22/2015 11:50 AM, Bart Smissaert wrote: > >> Still, in this particular case