On 8/3/17, 8:56 AM, "sqlite-users on behalf of Ulrich Telle" 
<sqlite-users-boun...@mailinglists.sqlite.org on behalf of ulrich.te...@gmx.de> 
wrote:
> Nevertheless, I think the pointer type string restriction gives a false sense 
> of security.

You described creating a malicious extension that would give you the ability to 
probe pointers by forging strings.

From a security point of view, once you have the ability to create and deploy a 
malicious extension into a target host, you’ve already got full local code 
execution access to that host anyway.


_______________________________________________
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to