Re: [ANN] Lua 5.4.1 (rc1) now available
[
Date Prev][
Date Next][
Thread Prev][
Thread Next]
[
Date Index]
[
Thread Index]
- Subject: Re: [ANN] Lua 5.4.1 (rc1) now available
- From: Roberto Ierusalimschy <roberto@...>
- Date: Thu, 8 Oct 2020 14:04:24 -0300
> One problem is that this can create an opportunity for DOS attacks if
> the numbers are under the control of an attacker.
Not only the numbers! The code must explicitly insert some of them
in the table (a[i] = true) but "pseudo"-insert the others
(a[-i] = nil). That does not seem something that occurs often in
real code.
-- Roberto