Lua: delete loadstring()
Fixes the vulnerability introduced in commit52ae31efb2
. (cherry-picked from commit6450bada57
)
This commit is contained in:
parent
21999b1fc9
commit
8a0dc8bdd9
1 changed files with 2 additions and 0 deletions
|
@ -551,6 +551,8 @@ lua_kernel_base::lua_kernel_base()
|
|||
|
||||
lua_pushcfunction(L, intf_load);
|
||||
lua_setglobal(L, "load");
|
||||
lua_pushnil(L);
|
||||
lua_setglobal(L, "loadstring");
|
||||
|
||||
cmd_log_ << "Initializing package repository...\n";
|
||||
// Create the package table.
|
||||
|
|
Loading…
Add table
Reference in a new issue