ericsink / SQLitePCL.raw

A Portable Class Library (PCL) for low-level (raw) access to SQLite
Apache License 2.0
512 stars 106 forks source link

Compile SQLite.Interop with security flags #577

Closed jeremy-bridges closed 6 months ago

jeremy-bridges commented 6 months ago

Our PEN testers recently found that the SQLite.Interop.dll was not compiled with ControlFlowGuard enabled. Can we get this changed in the next iteration of the nuget packages? Thanks in advance!

https://learn.microsoft.com/en-us/windows/win32/secbp/control-flow-guard

ericsink commented 6 months ago

I'm pretty sure this project does not include a DLL with that name.

sjlombardo commented 6 months ago

@jeremy-bridges - you should report this issue on the SQLite forum. You're talking about System.Data.SQLite which is maintained by the SQLite development team.