On 2/19/15, Roger Binns <rogerb at rogerbinns.com> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 02/18/2015 01:28 PM, Jay Kreibich wrote: >> SQLite kind of already does this, if you consider VDBE instructions >> to be an IR. > > There is a lot that would have to be done with it: > > - - make the IR stable across releases > > - - add more general instructions beyond only what is needed for SQL > > - - expose an API that takes the IR > > - - possibly redesign it to make static verification possible, like Java > bytecode did. Currently VDBE can assume there is no hostile intent, > but general provided IR would need to be checked. For example a > static check that it doesn't goto outside the bounds of the IR. > > - - lots of documentation and provision for testing > > All that adds up to a lot of work, and possibly quite a lot of redesign! >
And, there would likely be a performance hit. -- D. Richard Hipp drh at sqlite.org