On Sun, Dec 22, 2013 at 1:05 PM, jitendar kumar <jitenda...@gmail.com>wrote:
> > My concern is not only about the memcpy in sqlite3ExprAlloc(). > > Do any other memcpy() instance present in source code "safe" from condition > where memcpy() having src=NULL and length !=0. ???? > Dunno. Probably not, as the scan-build tool of "clang" would have probably fussed at us about them. And we do have a rather extensive test suite for SQLite (http://www.sqlite.org/testing.html, http://www.sqlite.org/checklists/3080200/index) which has a high probability of turning up any problems of that kind. But you are the one with the fancy "DUMA" static analysis tool - you tell us... -- D. Richard Hipp d...@sqlite.org _______________________________________________ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
