News for hackers. Stuff that matters.

A comment on Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws. Parent comment

Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by wruza on Saturday June 29, 2024 @02:24PM (#40832493)
Loading raw bytecode is known to be unsafe, and iirc that is mentioned in lua_load/luaL_load* documentation.

A preprocessor could spit out Lua code with the same effect and less complexity. Really interesting why and how these decision were made.

[ Parent | on HN ]
Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by mananaysiempre on Saturday June 29, 2024 @04:07PM (#40833035)
For what it’s worth, Metalua also generated PUC-Lua bytecode directly instead of source code, making it incompatible with LuaJIT (which might have been part of the reason why it died).
[ Parent | on HN ]