Re: Are function environments now secure?
[
Date Prev][
Date Next][
Thread Prev][
Thread Next]
[
Date Index]
[
Thread Index]
- Subject: Re: Are function environments now secure?
- From: Roberto Ierusalimschy <roberto@...>
- Date: Sun, 2 Jun 2013 10:48:05 -0300
> Now that getfenv is finally dead and buried, is the function
> environment tamper-proof against anything short of
> debug.getupvalue?
Yes, up to functions lexically sharing the same environment:
function tamper_proof (...) ... end
function spy (e) local o = _ENV; _ENV = e; return o end
With 'spy', you can see and change the environment of 'tamper_proof'.
-- Roberto