Re: An heap-use-after-free is triggered in the insertkey()

Roberto Ierusalimschy <[email protected]> Thu, 28 May 2026 09:50:04 -0300
Newsgroups gmane.comp.lang.lua.general
Message-ID <[email protected]>
> > I expect that using "debug" module voids warranty.
> 
> This disclaimer is well known, but Sergey's example got me thinking:
> does it still apply to "read-only" uses of the debug library?

Sure it does. For instance, by only reading the registry or a function
upvalue we may be able to access (and then call) some function that
otherwise could not be called at that point and (for instance) release some
resource that is still being used.

On the other hand, only because the example uses the debug library it does
not imply that the real bug is a direct consequence of that use. As this
bug involves the GC, it is worth investigating what is going on there.

-- Roberto

-- 
You received this message because you are subscribed to the Google Groups "lua-l" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/lua-l/20260528125004.GG104384%40arraial.inf.puc-rio.br.