lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]


I actually think this makes a lot of sense. Providing and dealing with binary chunks is not something that should live outside the debug library, particularly given the change in attitude towards the debug library. It is a very open vector for attack and not incredibly obvious it exists in a stock distribution.

Sent from my Android device.

> On 22 August 2010 09:09, Stuart P. Bentley <stuart@testtrack4.com> wrote:
>> It'd probably be a good idea to make rejecting bytecode in load() an #ifdef,
>> with a prominent note in the manual / README that it should be defined in
>> essentially anything that runs editable scripts and/or doesn't have its own
>> bytecode verification routine.
>
> Maybe having load() reject bytecode and adding a debug.load() that
> accepts it would communicate the right message.
>
> henk