Hacker News new | past | comments | ask | show | jobs | submit login

corsix explanation of the bug is here: https://gist.github.com/corsix/6575486

it is a very good write up. it was not too difficult to convert it to 64 bit.

i'm fairly sure the demo page on the lua website is vulnerable: http://www.lua.org/demo.html but lua-5.3 is a little different fro lua-5.1 so i don't have a working exploit for this. but they let you load bytecode.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: