On 11/17/15, Jonathan Metzman <jon.metzman at gmail.com> wrote: > When fuzzing sqlite with American Fuzzy Lop, I believe I found the > following bug in the sqlite shell: >
Thanks for the report. Joe has checked in a fix. Be careful about running AFL on the "sqlite3" command-line shell. AFL might discover that it can run commands like: ".shell rm -rf ~" -- D. Richard Hipp drh at sqlite.org