News for hackers. Stuff that matters.

A comment on Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws. Parent comment

Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by hn_throwaway_99 on Sunday June 30, 2024 @01:03AM (#40835256)
> In general, verifying programs is extremely hard, not just because of rice's theorem but because it's so easy to miss a spot, especially for non-trivial bytecode languages like lua's.

Perhaps a dumb question then. Java has famously had a bytecode verifier for decades. Is it the case that:

a) bytecode verification is fundamentally easier in statically typed languages

or

b) it's just as hard for Java, but Java has had decades to work on it and it's still taken a long time to fix all the bugs/security issues.

[ Parent | on HN ]
Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by Hendrikto on Sunday June 30, 2024 @05:15AM (#40836023)
c) Java‘s VM uses a different architecture, and the bytecode is also designed differently.
[ Parent | on HN ]
Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by hn_throwaway_99 on Sunday June 30, 2024 @05:10PM (#40840413)
Understood, but then what is it about the differences in the JVM and bytecode that make it more amenable to verification?
[ Parent | on HN ]