Version 50.1 LUA Console Bug

  • Cr15py
    7th Jun 2011 Member 0 Permalink
    This is one serious bug. Not serious as in, will steal all your passwords and occurs often. Serious as in, does some wierd ass shit...

    How to Reproduce:
    1) Save this script in your Powder Toy(beta) directory.

    2) If Powder Toy is not running, execute it by double clicking it(no other method).

    3) Open console(press the '`'/'~' key).

    4) Type the following: dofile("file.lua"), renaming file.lua to whatever you named the script.

    5) Now enter the following: tpt.log(dump(tpt))

    WARNING: This should not do any permanent damage. In the near impossible event it does, you agree to accept all responsibility for any damages this causes, and you agree that I may not be held responsible for any damages, losses, or problems caused by this.

    Anyway, have fun... I guess.
  • jacksonmj
    7th Jun 2011 Developer 0 Permalink
    I found and fixed the buffer overflow in tpt.log a couple of hours ago :-)

    https://github.com/jacksonmj/The-Powder-Toy/commit/d6db4f9ee1d18907625eee5b090c4cf30675e6a8
  • Cr15py
    7th Jun 2011 Member 0 Permalink
    Oh sorry... hmm was it exploitable? I would love to make an exploit for this ;)