X-Authentication-Warning: delorie.com: mail set sender to geda-user-bounces using -f X-Recipient: geda-user AT delorie DOT com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.13.68,1.0.33,0.0.0000 definitions=2015-02-07_01:2015-02-07,2015-02-07,1970-01-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 suspectscore=3 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1412110000 definitions=main-1502070094 From: Chris Smith Content-type: text/plain; charset=us-ascii MIME-version: 1.0 (1.0) Subject: Re: [geda-user] FOSDEM Message-id: <027361AD-8EC2-4E0E-B43E-C48B31C53A4D@icloud.com> Date: Sat, 07 Feb 2015 09:09:50 +0000 References: <1420499386 DOT 3521 DOT 3 DOT camel AT cam DOT ac DOT uk> <20150202152654 DOT GA13336 AT cuci DOT nl> <54CFD589 DOT 9040702 AT xs4all DOT nl> <20150203112631 DOT 3507a0c1 AT Parasomnia DOT thuis DOT lan> <20150204054256 DOT Horde DOT Pm1JV8RJbICk9SHvIGwZ7A3 AT webmail DOT in-berlin DOT de> <20150204193720 DOT Horde DOT 42xUN-NzhCJRWZne-M5eCQ1 AT webmail DOT in-berlin DOT de> <90236728-E79D-47C7-BFB1-34140DB85ACB AT sbcglobal DOT net> <201502042333 DOT t14NX28o024789 AT envy DOT delorie DOT com> <7C1A5871-3056-482C-BC58-173D90D80F77 AT icloud DOT com> In-reply-to: To: "geda-user AT delorie DOT com" X-Mailer: iPad Mail (12B466) Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id t1799rhr010888 Reply-To: geda-user AT delorie DOT com > On 6 Feb 2015, at 16:29, Jason White wrote: > > For those who have not seen, I implemented an example program in C > using Lua to safely read data defined in Lua files. I added to > protected mode to the interpreter which disables the instructions in > the Lua virtual machine which are not associated with defining > (storing) variables. So if you put something other than a variable > definition in the file, (for instance a loop or a function call) the > interpreter will just skip over it producing a warning in the console. > This makes it safe to use as a parser for data files since it disables > its ability to run it as a program; all it becomes capable of doing is > pushing strings and numbers to the stack. Why do you think it necessary to remove all that? All you need do to provide a secure sandbox is remove or sanitise a handful of built in functions and libraries. Chris