Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Fixed a potential way to escape the Lua Plugin sandbox #5846

Merged
merged 1 commit into from
Jan 22, 2025

Conversation

Mm2PL
Copy link
Collaborator

@Mm2PL Mm2PL commented Jan 22, 2025

I fucked up by not blocking off package.loadlib.
image

Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

clang-tidy made some suggestions

@@ -264,6 +264,11 @@ void g_print(ThisPluginState L, sol::variadic_args args)
logHelper(L, L.plugin(), stream, args);
}

void package_loadlib(sol::variadic_args args)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

warning: parameter 'args' is unused [misc-unused-parameters]

Suggested change
void package_loadlib(sol::variadic_args args)
void package_loadlib(sol::variadic_args /*args*/)

@Mm2PL Mm2PL enabled auto-merge (squash) January 22, 2025 01:24
@Mm2PL Mm2PL merged commit ea02a42 into master Jan 22, 2025
18 checks passed
@Mm2PL Mm2PL deleted the fix/oopsie-i-left-a-sandbox-escape-function branch January 22, 2025 01:35
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant