Re: lua bytecode and sandbox evasion ?
[
Date Prev][
Date Next][
Thread Prev][
Thread Next]
[
Date Index]
[
Thread Index]
- Subject: Re: lua bytecode and sandbox evasion ?
- From: Roberto Ierusalimschy <roberto@...>
- Date: 2016年9月14日 11:09:41 -0300
> Yes, it is known, and credible. Defence is to not load untrusted bytecode,
> or to build your sandboxes at the OS level rather than the Lua level.
Note that Lua 5.2 introduced the parameter 'mode' in 'load' and
'loadfile', which allows us to prevent the execution of bytecodes.
-- Roberto