6 ms·
And Lua's bytecode loader, recently discussed here: https://news.ycombinator.com/item?id=40830005 https://news.ycombinator.com/item?id=40830005
by YoumuChan 2y ago
And Lua's bytecode loader, recently discussed here: https://news.ycombinator.com/item?id=40830005 https://news.ycombinator.com/item?id=40830005
- Dylan16807 2y agoI know "code is data", but it's a couple orders of magnitude more reasonable to have unsafe bytecode than to have unsafe data deserialization. If something is supposed to load arbitrary code, not just data, that needs to be super clear at a glance. If it comes across as a data library, but allows takeover, you have a problem. Especially if there isn't a similar data-only function/library.