List of innocuous functions?

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

List of innocuous functions?

Peter Kolbus-2
Is there any documentation showing, or an easy way to generate, the exact list of SQLite-provided functions that are innocuous?

I’d like to turn on the new SQLITE_TRUSTED_SCHEMA but support a variety of applications and am hoping for something to guide analysis.

Thanks
-Peter
_______________________________________________
sqlite-users mailing list
[hidden email]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Reply | Threaded
Open this post in threaded view
|

Re: List of innocuous functions?

Richard Hipp-3
SELECT DISTINCT name
   FROM pragma_function_list
 WHERE (flags & 0x200000)!=0
 ORDER BY name;

On 1/24/20, Peter Kolbus <[hidden email]> wrote:

> Is there any documentation showing, or an easy way to generate, the exact
> list of SQLite-provided functions that are innocuous?
>
> I’d like to turn on the new SQLITE_TRUSTED_SCHEMA but support a variety of
> applications and am hoping for something to guide analysis.
>
> Thanks
> -Peter
> _______________________________________________
> sqlite-users mailing list
> [hidden email]
> http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
>


--
D. Richard Hipp
[hidden email]
_______________________________________________
sqlite-users mailing list
[hidden email]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Reply | Threaded
Open this post in threaded view
|

Re: List of innocuous functions?

Brian Curley
separate but somewhat related question, based on the response:

   Has any thought been given to updating the documentation to cover those
pragmas that have been upgraded to selectable entities?

I've only been able to find a handful of references along the way, such as
pragma_table_info, pragma_index_info, and the aforementioned
pragma_function_list, at least that I recall. Any sort of listing of what's
available like these?

I'd think that it would be helpful in the peanut gallery. Thanks!

Regards.

Brian P Curley



On Fri, Jan 24, 2020 at 4:12 PM Richard Hipp <[hidden email]> wrote:

> SELECT DISTINCT name
>    FROM pragma_function_list
>  WHERE (flags & 0x200000)!=0
>  ORDER BY name;
>
> On 1/24/20, Peter Kolbus <[hidden email]> wrote:
> > Is there any documentation showing, or an easy way to generate, the exact
> > list of SQLite-provided functions that are innocuous?
> >
> > I’d like to turn on the new SQLITE_TRUSTED_SCHEMA but support a variety
> of
> > applications and am hoping for something to guide analysis.
> >
> > Thanks
> > -Peter
> > _______________________________________________
> > sqlite-users mailing list
> > [hidden email]
> > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
> >
>
>
> --
> D. Richard Hipp
> [hidden email]
> _______________________________________________
> sqlite-users mailing list
> [hidden email]
> http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
>
_______________________________________________
sqlite-users mailing list
[hidden email]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Reply | Threaded
Open this post in threaded view
|

Re: List of innocuous functions?

skywalk
SELECT DISTINCT name FROM pragma_function_list
--WHERE (flags & 0x200000)!=0 -- no such column: flags
ORDER BY name;

Works if I drop the WHERE.
Is there a special compile flag that must be used?

On Fri, Jan 24, 2020 at 5:42 PM Brian Curley <[hidden email]> wrote:

> separate but somewhat related question, based on the response:
>
>    Has any thought been given to updating the documentation to cover those
> pragmas that have been upgraded to selectable entities?
>
> I've only been able to find a handful of references along the way, such as
> pragma_table_info, pragma_index_info, and the aforementioned
> pragma_function_list, at least that I recall. Any sort of listing of what's
> available like these?
>
> I'd think that it would be helpful in the peanut gallery. Thanks!
>
> Regards.
>
> Brian P Curley
>
>
>
> On Fri, Jan 24, 2020 at 4:12 PM Richard Hipp <[hidden email]> wrote:
>
> > SELECT DISTINCT name
> >    FROM pragma_function_list
> >  WHERE (flags & 0x200000)!=0
> >  ORDER BY name;
> >
> > On 1/24/20, Peter Kolbus <[hidden email]> wrote:
> > > Is there any documentation showing, or an easy way to generate, the
> exact
> > > list of SQLite-provided functions that are innocuous?
> > >
> > > I’d like to turn on the new SQLITE_TRUSTED_SCHEMA but support a variety
> > of
> > > applications and am hoping for something to guide analysis.
> > >
> > > Thanks
> > > -Peter
> > > _______________________________________________
> > > sqlite-users mailing list
> > > [hidden email]
> > > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
> > >
> >
> >
> > --
> > D. Richard Hipp
> > [hidden email]
> > _______________________________________________
> > sqlite-users mailing list
> > [hidden email]
> > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
> >
> _______________________________________________
> sqlite-users mailing list
> [hidden email]
> http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
>
_______________________________________________
sqlite-users mailing list
[hidden email]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Reply | Threaded
Open this post in threaded view
|

Re: List of innocuous functions?

Richard Hipp-3
On 1/25/20, [hidden email] <[hidden email]> wrote:
> SELECT DISTINCT name FROM pragma_function_list
> --WHERE (flags & 0x200000)!=0 -- no such column: flags
> ORDER BY name;
>
> Works if I drop the WHERE.
> Is there a special compile flag that must be used?

You need to be using SQLite 3.31.0 or later.
--
D. Richard Hipp
[hidden email]
_______________________________________________
sqlite-users mailing list
[hidden email]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Reply | Threaded
Open this post in threaded view
|

Re: List of innocuous functions?

skywalk
Doh! I'm on 3.30.0.
Gotcha, thanks.

On Sat, Jan 25, 2020 at 8:22 PM Richard Hipp <[hidden email]> wrote:

> On 1/25/20, [hidden email] <[hidden email]> wrote:
> > SELECT DISTINCT name FROM pragma_function_list
> > --WHERE (flags & 0x200000)!=0 -- no such column: flags
> > ORDER BY name;
> >
> > Works if I drop the WHERE.
> > Is there a special compile flag that must be used?
>
> You need to be using SQLite 3.31.0 or later.
> --
> D. Richard Hipp
> [hidden email]
> _______________________________________________
> sqlite-users mailing list
> [hidden email]
> http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
>
_______________________________________________
sqlite-users mailing list
[hidden email]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users