[Date Prev][Date Next][Thread Prev][Thread Next]
[Date Index]
[Thread Index]
- Subject: Re: Specially crafted binary chunks can cause Lua to crash
- From: Luiz Henrique de Figueiredo <lhf@...>
- Date: Thu, 27 Mar 2008 14:17:46 -0300
> Is the same change needed in the VM's LOADBOOL?
Yes, some change is needed, thanks for pointing it out, but I'm not sure
it's in the VM (though it's the easiest fix).
Here is an "attack" in the lines you suggest:
f=loadstring([[
local a=true
print(a,a==true,a==false)
if a then
print"a is true"
else
print"a is false"
end
]],"=")
s=string.dump(f)
s=s:sub(1,37)..string.char(1)..s:sub(39)
g=loadstring(s)
f()
g()
- References:
- Re: Specially crafted binary chunks can cause Lua to crash, Roberto Ierusalimschy
- Re: Specially crafted binary chunks can cause Lua to crash, Peter Cawley
- Re: Specially crafted binary chunks can cause Lua to crash, Roberto Ierusalimschy
- Re: Specially crafted binary chunks can cause Lua to crash, Peter Cawley
- Re: Specially crafted binary chunks can cause Lua to crash, Greg Falcon
- Re: Specially crafted binary chunks can cause Lua to crash, Luiz Henrique de Figueiredo
- Re: Specially crafted binary chunks can cause Lua to crash, Ben Sunshine-Hill
- Re: Specially crafted binary chunks can cause Lua to crash, Luiz Henrique de Figueiredo
- Re: Specially crafted binary chunks can cause Lua to crash, Luiz Henrique de Figueiredo
- Re: Specially crafted binary chunks can cause Lua to crash, Peter Cawley