From mboxrd@z Thu Jan 1 00:00:00 1970 From: Danny Milosavljevic Subject: Re: Cuirass news Date: Thu, 8 Feb 2018 17:29:05 +0100 Message-ID: <20180208172905.19e9e789@scratchpost.org> References: <877es6x5xj.fsf@gnu.org> <87lggmjjgo.fsf@gmail.com> <87k1w6jjak.fsf@gmail.com> <87h8raxeym.fsf@gnu.org> <20180126153005.259a75e8@scratchpost.org> <87zi4z1eb0.fsf@gnu.org> <20180127181852.42f0bcbf@scratchpost.org> <87fu6bwqix.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:37145) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ejp4X-0003GT-Qr for guix-devel@gnu.org; Thu, 08 Feb 2018 11:29:18 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ejp4S-0007dl-ST for guix-devel@gnu.org; Thu, 08 Feb 2018 11:29:17 -0500 In-Reply-To: <87fu6bwqix.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?ISO-8859-1?Q?Court=E8s?= Cc: guix-devel Hi Ludo, On Thu, 08 Feb 2018 14:37:58 +0100 ludo@gnu.org (Ludovic Court=C3=A8s) wrote: > We=E2=80=99re making progress! :-) Nice! I'm still checking a few loose ends but I think we're pretty okay now from a security standpoint - except for db-get-builds, which I'm amending right now. Also, I'd like to get the number of distinct SQL statements down, so I'll propose another patch on guix-patches to do that. Also, I think sqlite-exec shouldn't call sqlite-finalize most of the time - otherwise the cached statement will be lost :P I've also reintroduced sqlite-bind-args in a nicer version, please pull: https://notabug.org/civodul/guile-sqlite3/pulls/3 .