tech-kern archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
RE: [patch] changing lua_Number to int64_t
> From: Marc Balmer [mailto:marc%msys.ch@localhost]
>
> > It's not *much* less safe than compiling and executing a string in the
> > kernel. The only additional attack surfaces are that you can write
things
> > that the compiler wouldn't write. This can (1) cause a crash at load
time,
> > or it can (2) cause surprising behavior later.
>
> The problem is that malicious bytecode in 5.1 is possible. That is why
> there is a guad against loading bytecode.
Malicious in what sense? Is this a type-1 problem or a type-2 problem? Or
something else that I've not considered?
--Terry
Home |
Main Index |
Thread Index |
Old Index