Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Sqlite has had multiple CVEs featuring use-after-free, heap overflows, usage of null pointers, use of uninitialized memory, and array bounds overflows. [1]

Those could all be avoided by not using C.

[1]: https://www.sqlite.org/cves.html



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: