Skip to content
Snippets Groups Projects
  1. Jul 21, 2018
  2. Jul 18, 2018
  3. May 15, 2018
  4. Mar 25, 2018
  5. Feb 15, 2018
  6. Jan 30, 2018
  7. Jan 28, 2018
  8. Jan 22, 2018
    • 20kdc's avatar
      Improve LuaController security (#393) · 065e8703
      20kdc authored
      Fixes:
      1. Lack of 'safe' on minetest.deserialize usage
      2. String sandbox bypass via (""):evil()
      3. Loss of upcoming digilines messages on server shutdown
      4. LCs failing to show information on some errors
      5. Interrupt IDs as infinite data storage
      065e8703
  9. Jan 18, 2018
  10. Jan 14, 2018
  11. Jan 13, 2018
    • Christopher Head's avatar
      Limit and optimize digiline_send (#379) · 2b096f05
      Christopher Head authored
      * Close vulnerability and optimize digiline_send
      
      `digiline_send` as it previously existed was vulnerable to a
      time-of-check-to-time-of-use vulnerability in which a table could be
      sent, size-checked, and then modified after the send but before
      delivery. This would allow larger tables to be sent. It was also slow
      because it called `minetest.serialize`. Fix both of these by
      implementing custom message cleanup logic which simultaneously computes
      the message’s cost.
      
      * Clean up interaction with Digilines
      
      Use `minetest.global_exists` to avoid an undefined global variable
      warning when operating a Luacontroller with Digilines not available. Use
      the new `digilines` table in preference to the old `digiline` table.
      
      * Copy received messages
      
      When a Digiline message is received at a Luacontroller, copy it so that
      local modifications made by the Luacontroller code will not modify
      copies of the table that are being passed to other nodes on the Digiline
      network.
      2b096f05
  12. Jan 06, 2018
  13. Oct 31, 2017
  14. Oct 29, 2017
  15. Oct 21, 2017
  16. Oct 18, 2017
  17. Oct 15, 2017
  18. Oct 08, 2017
  19. Oct 07, 2017
  20. Oct 05, 2017
  21. Oct 04, 2017
  22. Oct 03, 2017
  23. Sep 19, 2017
  24. Sep 18, 2017
  25. Sep 11, 2017
  26. Sep 03, 2017
  27. May 08, 2017
  28. Apr 21, 2017
Loading