Skip to content

Fix SQL injection when SAVEPOINT name is tainted#1854

Merged
gwenn merged 2 commits into
rusqlite:masterfrom
gwenn:savepoint
Jun 6, 2026
Merged

Fix SQL injection when SAVEPOINT name is tainted#1854
gwenn merged 2 commits into
rusqlite:masterfrom
gwenn:savepoint

Conversation

@gwenn

@gwenn gwenn commented Jun 4, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

@codecov

codecov Bot commented Jun 4, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 96.87500% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 87.69%. Comparing base (c5f8828) to head (fa574eb).
⚠️ Report is 2 commits behind head on master.

Files with missing lines Patch % Lines
src/pragma.rs 90.90% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master    #1854      +/-   ##
==========================================
+ Coverage   87.68%   87.69%   +0.01%     
==========================================
  Files          58       58              
  Lines       10927    10948      +21     
==========================================
+ Hits         9581     9601      +20     
- Misses       1346     1347       +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@gwenn

gwenn commented Jun 5, 2026

Copy link
Copy Markdown
Collaborator Author

Not strictly related but we can check pragma with:

SELECT 1 FROM pragma_pragma_list WHERE name = 'schema_version';

https://sqlite.org/pragma.html#pragma_pragma_list

@gwenn gwenn merged commit a021dc7 into rusqlite:master Jun 6, 2026
18 checks passed
@gwenn gwenn deleted the savepoint branch June 6, 2026 05:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant