- Dec 29, 2018
-
-
Thomas Rudin authored
-
- Dec 09, 2018
-
-
number Zero authored
-
- Sep 18, 2018
-
-
luk3yx authored
Saves on bandwidth, however the code is still accessible via the formspec.
-
luk3yx authored
If LuaControllers handle sensitive information, hacked clients could get this information from the LuaController. Marking the memory as private fixes this and saves a small amount of bandwidth.
-
- Jul 23, 2018
-
-
Vitaliy authored
Because of working inside the sandbox, it was unable to print tables.
-
- Jul 18, 2018
-
-
beyondlimits authored
-
- Jan 22, 2018
-
-
20kdc authored
Fixes: 1. Lack of 'safe' on minetest.deserialize usage 2. String sandbox bypass via (""):evil() 3. Loss of upcoming digilines messages on server shutdown 4. LCs failing to show information on some errors 5. Interrupt IDs as infinite data storage
-
- Jan 13, 2018
-
-
Christopher Head authored
* Close vulnerability and optimize digiline_send `digiline_send` as it previously existed was vulnerable to a time-of-check-to-time-of-use vulnerability in which a table could be sent, size-checked, and then modified after the send but before delivery. This would allow larger tables to be sent. It was also slow because it called `minetest.serialize`. Fix both of these by implementing custom message cleanup logic which simultaneously computes the message’s cost. * Clean up interaction with Digilines Use `minetest.global_exists` to avoid an undefined global variable warning when operating a Luacontroller with Digilines not available. Use the new `digilines` table in preference to the old `digiline` table. * Copy received messages When a Digiline message is received at a Luacontroller, copy it so that local modifications made by the Luacontroller code will not modify copies of the table that are being passed to other nodes on the Digiline network.
-
- Oct 31, 2017
-
-
DS authored
-
- Oct 18, 2017
-
-
Vitaliy authored
-
- Oct 07, 2017
-
-
DS authored
-
- May 08, 2017
-
-
number Zero authored
See #337 for details.
-
DS authored
-
- Apr 14, 2017
-
-
numberZero authored
New overheating system that doesn’t use the meta.
-
- Mar 07, 2017
-
-
Wuzzy authored
* Fix inconsistent insulated mesecon names * Clarify lightstone names * Rename meselamp to "Mesecon Lamp" * Use capitalization "Luacontroller" consistently * Cleanup / improvements for logic gate naming
-
- Jan 15, 2017
-
-
Jeija authored
-
- Dec 28, 2016
-
-
Jeija authored
Restrict maximum length of messages to 50.000 characters and disable sending functions or table references over the wire. Restrict types of channel variable to string, number or boolean. The missing length restriction made DoS-like attacks possible by overflowing memory using string concatenation. Thanks to gamemanj for disclosing this issue.
-
- Aug 16, 2016
-
-
Christopher Head authored
-
- May 17, 2016
-
-
Carter Kolwey authored
protection is ignored with protection_bypass_priv
-
- Apr 26, 2016
-
-
electrodude authored
-
- Apr 02, 2016
-
-
Pedro Gimeno authored
Disabling LuaJIT for user code enables normal working of debug.sethook() even for loops. The drawback is that that code will run more slowly. The fourth parameter of string.find indicates whether the second parameter should be interpreted literally (true) or as a pattern (false). Allowing patterns enables DoS attacks, but it's possible to allow literal matching with little effort, by disallowing the function only if the fourth parameter (plain mode) is not `true`.
-
- Mar 14, 2016
-
-
Jeija authored
-
- Mar 13, 2016
- Jan 02, 2016
-
-
Carter Kolwey authored
-
- Oct 18, 2015
-
-
Jeija authored
If size limit is exceeded, the luacontroller overheats. Overheating will cause the memory to be erased.
-
- Oct 04, 2015
-
-
Jeija authored
-
- Dec 20, 2014
-
-
Jeija authored
-
- Nov 29, 2014
-
-
Jeija authored
I hope this doesn't break anyone's setup.
-
- Nov 25, 2014
-
-
Jeija authored
-
- Nov 23, 2014
-
-
Jeija authored
-
- Nov 22, 2014
-
-
Jeija authored
-
Jeija authored
Settings can now be retrieved by mesecon.setting(<name>, <default>) and can be modified without editing the source code by adding the setting to minetest.conf For instance, you can add mesecon.blinky_plant_interval = 0.5 to minetest.conf in order to increase the blinking speed. Rewrite the blinky plant with nodetimers. Fixes #161
-
Jeija authored
flexibility and because it was never inteded to be OOP in the first place. mesecon.receptor_on and mesecon.receptor_off are provided by wrappers (mesecon:receptor_on/off) for compatibility, but will be removed. Mod programmers that use mesecons: Please update! Also, fix microcontroller polluting the global namespace and remove some deprecated stuff.
-
Jeija authored
This may also bring some performance benefit.
-
- Nov 21, 2014
-
-
Jeija authored
Just some minor issues like dead code.
-
- Oct 07, 2014
-
-
ShadowNinja authored
Changes: * Stops code after a certain number of instructions. * Allows functions, due to instruction counting. * Allows loops and goto with non-JIT Lua (LuaJIT doesn't count looping as an instruction, allowing infinite loops), due to instruction counting. * Removes string matching functions as they can be slow. * Adds some safe functions. * Limits the amount of printing that can be done (to prevent console flooding). * Code cleanup. * More...
-
- Apr 20, 2014
-
-
Jeija authored
Fix #155 (option 2 used). Remove non-ActionQueue system. Enable overheat for more than 20 actions per second on lua- / microcontrollers and gates. Fix a bug where a burnt luacontroller didn't have the correct pin-states as the burnt controller does not register any changes from outside.
-
- Mar 19, 2014
-
-
Jeija authored
Why did we actually put the update action in a queue again? Whatever issue it that was for, I couldn't reproduce it. Propably the ActionQueue fixed that...?
-
Jeija authored
Remove timer() from LuaController and make interrupt() use the ActionQueue so that it will keep working when restarting the server
-