Re: lua 5.1: fix fix for CVE-2014-5461

2021-03-16 Thread Stuart Henderson
On 2021/03/16 19:56, Theo Buehler wrote: > I think the diff from https://www.lua.org/bugs.html#5.2.2-1 was > backported to the wrong function (to adjust_varargs() instead of > luaD_precall(). Compare with https://github.com/redis/redis/pull/7733 > > While I did not manage to make the PoC crash on

lua 5.1: fix fix for CVE-2014-5461

2021-03-16 Thread Theo Buehler
I think the diff from https://www.lua.org/bugs.html#5.2.2-1 was backported to the wrong function (to adjust_varargs() instead of luaD_precall(). Compare with https://github.com/redis/redis/pull/7733 While I did not manage to make the PoC crash on my machines, I'm pretty sure the diff used by Redis