RE: The security of function load

[Yongheng Chen <changochen1@...>]

So if the load function causes memory corruption, it is not considered as bugs?

 

Best,

Yongheng Chen

 

From: Rena
Sent: Wednesday, September 23, 2020 5:11 PM
To: Lua mailing list
Subject: Re: The security of function load

 

On Wed, Sep 23, 2020 at 4:24 PM Yongheng Chen <changochen1@gmail.com> wrote:

> 

> The function load accepts a binary chunk as argument. I wonder if is it memory-safe against malformed binary chunks? I couldn’t find related materials about it.

> 

> 

> 

> Best,

> 

> Yongheng Chen

> 

> 

 

It is not. Previous efforts to harden it against such attacks proved

more work than it was worth. You can prevent loading binary chunks

entirely, but in general you must trust the code being loaded.

 

--

Sent from my Game Boy.