Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When a special input is constructed, the Lua engine fails to parse the input and crash. #96

Open
liutong321asd opened this issue May 22, 2020 · 2 comments

Comments

@liutong321asd
Copy link

When a special input is constructed, the Lua engine fails to parse the input and crashes.
For details about the special input, see poc1 to poc3 in the attachment.
When poc1 and poc3 are entered, a segment error occurs in the lj_str_original_hash function, resulting in crash.
When poc2 is entered, a segment error occurs after the lj_BC_JMP function is called, causing the system crash.

pls comfirm above, from Huawei & Tencent Enke Laboratory.

poc1.txt
poc2.txt
poc3.txt

@hippi777
Copy link

hi there! :)

are these made by lj itself, or are they made up things? in the 1st case, its a bug, in the 2nd case, dont run anything that cant be trusted, especially bytecode, as thats really not a planned use case...

@hippi777
Copy link

and in the 1st case, could u show them before compiling? :D

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants