Unnamed repository; edit this file 'description' to name the repository. http://git.linux-forks.de/mesecons/atom?h=master 2018-09-18T11:01:18+00:00 2018-09-18T11:01:18+00:00 luk3yx luk3yx@users.noreply.github.com 2018-09-17T19:55:53+00:00 urn:sha1:028c290cd70591383682c244a95a955fd3cba083 Saves on bandwidth, however the code is still accessible via the formspec. 2018-09-18T11:01:18+00:00 luk3yx luk3yx@users.noreply.github.com 2018-09-17T19:47:19+00:00 urn:sha1:8808bb8911bc443a8cfb71a63b1feb5abeba5b17 If LuaControllers handle sensitive information, hacked clients could get this information from the LuaController. Marking the memory as private fixes this and saves a small amount of bandwidth. 2018-07-23T12:53:32+00:00 Vitaliy silverunicorn2011@yandex.ru 2018-07-23T12:53:32+00:00 urn:sha1:d4e05f33afc9a369fbbcdb49aea10cd860a7a680 Because of working inside the sandbox, it was unable to print tables. 2018-07-18T19:49:34+00:00 beyondlimits beyondlimits@10g.pl 2018-07-18T19:49:34+00:00 urn:sha1:12fb09f452364da6c2986db5b35190c61d0b1d64 2018-01-22T11:26:21+00:00 20kdc asdd2808@gmail.com 2018-01-22T11:26:21+00:00 urn:sha1:065e870349cf394240cf9748db4743c0d6d54461 Fixes: 1. Lack of 'safe' on minetest.deserialize usage 2. String sandbox bypass via (""):evil() 3. Loss of upcoming digilines messages on server shutdown 4. LCs failing to show information on some errors 5. Interrupt IDs as infinite data storage 2018-01-13T19:27:00+00:00 Christopher Head chead@chead.ca 2018-01-13T19:27:01+00:00 urn:sha1:2b096f050d8ef46ec0a669ea4e125ae79745090e * Close vulnerability and optimize digiline_send `digiline_send` as it previously existed was vulnerable to a time-of-check-to-time-of-use vulnerability in which a table could be sent, size-checked, and then modified after the send but before delivery. This would allow larger tables to be sent. It was also slow because it called `minetest.serialize`. Fix both of these by implementing custom message cleanup logic which simultaneously computes the message’s cost. * Clean up interaction with Digilines Use `minetest.global_exists` to avoid an undefined global variable warning when operating a Luacontroller with Digilines not available. Use the new `digilines` table in preference to the old `digiline` table. * Copy received messages When a Digiline message is received at a Luacontroller, copy it so that local modifications made by the Luacontroller code will not modify copies of the table that are being passed to other nodes on the Digiline network. 2017-10-31T21:50:39+00:00 DS vorunbekannt75@web.de 2017-10-31T21:50:39+00:00 urn:sha1:ff0bd76efece4738ed6ba406460859a4d1e7cd8e 2017-10-18T19:54:28+00:00 Vitaliy silverunicorn2011@yandex.ru 2017-10-18T19:54:28+00:00 urn:sha1:cc860acf8a4d0c7c0a8c814bdf0aceada72e2b56 2017-10-06T22:44:49+00:00 DS vorunbekannt75@web.de 2017-10-06T22:44:49+00:00 urn:sha1:905260c8db2d7d4844e3955fa38a79da233b3ab7 2017-05-08T14:34:30+00:00 number Zero silverunicorn2011@yandex.ru 2017-05-08T14:33:05+00:00 urn:sha1:564bdc2d9b0f265b4286b3caaf8a9059953ce08b See #337 for details.