|
> Yes, it is known, and credible. Defence is to not load untrusted bytecode, > or to build your sandboxes at the OS level rather than the Lua level. Note that Lua 5.2 introduced the parameter 'mode' in 'load' and 'loadfile', which allows us to prevent the execution of bytecodes. -- Roberto