[Date Prev][Date Next][Thread Prev][Thread Next]
[Date Index]
[Thread Index]
- Subject: Re: [ANN] Lua 5.4.1 (rc1) now available
- From: Roberto Ierusalimschy <roberto@...>
- Date: Thu, 8 Oct 2020 14:04:24 -0300
> One problem is that this can create an opportunity for DOS attacks if
> the numbers are under the control of an attacker.
Not only the numbers! The code must explicitly insert some of them
in the table (a[i] = true) but "pseudo"-insert the others
(a[-i] = nil). That does not seem something that occurs often in
real code.
-- Roberto
