[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: master 3d38d1d: Add sqlite3 support to Emacs
From: |
Eli Zaretskii |
Subject: |
Re: master 3d38d1d: Add sqlite3 support to Emacs |
Date: |
Wed, 15 Dec 2021 16:53:05 +0200 |
> From: Andy Moreton <andrewjmoreton@gmail.com>
> Date: Tue, 14 Dec 2021 23:41:14 +0000
>
> I'm not at all expert on SQL matters - I read the sqlite documentation
> which points out that there are two ways to allow loading of sqlite
> extensions from C:
>
> a) sqlite3_db_config(db,SQLITE_DBCONFIG_ENABLE_LOAD_EXTENSION,..)
> - enables sqlite3_load_extension()
> - does not enable SQL function "load_extension"
>
> b) sqlite3_enable_load_extension()
> - enables sqlite3_load_extension()
> - ALSO enables SQL function "load_extension"
>
> So if sqlite extensions are to be allowed in emacs, option (a) should be
> preferred. This is explicitly called out as a security issue in the docs.
>
> Loading sqlite extensions should be disabled by default, and only be
> enabled by explicit user configuration.
But we don't call sqlite3_enable_load_extension, we call only
sqlite3_load_extension. What does this mean for load_extension -- is
it enabled or disabled?
- Re: master 3d38d1d: Add sqlite3 support to Emacs, (continued)
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Po Lu, 2021/12/13
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Lars Ingebrigtsen, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Po Lu, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Lars Ingebrigtsen, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Po Lu, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Lars Ingebrigtsen, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Eli Zaretskii, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Lars Ingebrigtsen, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Eli Zaretskii, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Andy Moreton, 2021/12/14
- Re: master 3d38d1d: Add sqlite3 support to Emacs,
Eli Zaretskii <=
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Richard Stallman, 2021/12/15
- Re: master 3d38d1d: Add sqlite3 support to Emacs, Lars Ingebrigtsen, 2021/12/15
- Contradictiory directions (Was: Re: master 3d38d1d: Add sqlite3 support to Emacs), Po Lu, 2021/12/15
- Re: Contradictiory directions, Lars Ingebrigtsen, 2021/12/15
- Re: Contradictiory directions, Po Lu, 2021/12/15
- Re: Contradictiory directions, Lars Ingebrigtsen, 2021/12/15
- Re: Contradictiory directions, Po Lu, 2021/12/15
- Re: Contradictiory directions, Lars Ingebrigtsen, 2021/12/15
- Re: Contradictiory directions, Po Lu, 2021/12/15
- Re: Contradictiory directions, Lars Ingebrigtsen, 2021/12/15