<story><title>Remote code execution vulnerability in SQLite</title><url>https://blade.tencent.com/magellan/index_en.html</url></story><parent_chain><item><author>modeless</author><text>SQLite is the most thoroughly tested codebase I&amp;#x27;m aware of [1]. It has seven times more test code than non-test code. 100% branch coverage. If even SQLite can have a RCE vulnerability, I&amp;#x27;m convinced that it is not feasible for &lt;i&gt;anybody&lt;/i&gt; to write safe C code.&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.sqlite.org&amp;#x2F;testing.html&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.sqlite.org&amp;#x2F;testing.html&lt;/a&gt;</text></item></parent_chain><comment><author>segmondy</author><text>100% branch, line coverage means nothing. It&amp;#x27;s about logical coverage. What are you testing for? You are not testing lines of code, but logic.</text></comment>
<story><title>Remote code execution vulnerability in SQLite</title><url>https://blade.tencent.com/magellan/index_en.html</url></story><parent_chain><item><author>modeless</author><text>SQLite is the most thoroughly tested codebase I&amp;#x27;m aware of [1]. It has seven times more test code than non-test code. 100% branch coverage. If even SQLite can have a RCE vulnerability, I&amp;#x27;m convinced that it is not feasible for &lt;i&gt;anybody&lt;/i&gt; to write safe C code.&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.sqlite.org&amp;#x2F;testing.html&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.sqlite.org&amp;#x2F;testing.html&lt;/a&gt;</text></item></parent_chain><comment><author>blattimwind</author><text>SQLite can by principle not suffer from a RCE.</text></comment>