Re: Memory corruption in in luaV_execute (lua/Test_lua/lua/lvm.c:1784)

[Viacheslav Usov <via.usov@...>]

On Mon, Aug 31, 2020 at 12:28 PM Luiz Henrique de Figueiredo
<lhf@tecgraf.puc-rio.br> wrote:

> Loading malformed bytecode should not crash Lua.
> Running maliciously crafted bytecode can crash the interpreter.

You are certainly free to make the bytecode loader more robust :)

That said, currently we see "Maliciously crafted binary chunks can
crash the interpreter" in the section on load(), and it is not obvious
at all that this does not apply to load() itself.

Not that the distinctions between "malformed" and "maliciously
crafted" and between "loading" and "running" would make a big
difference to Lua users.

Cheers,
V.