[vlc-devel] Lua extension and vlc.misc

Pierre Ynard linkfanel at yahoo.fr
Wed Feb 29 00:13:34 CET 2012


> Now, people use it to save temp/cache files with io.open

What prevents scripts from reading or overwriting arbitrary files? Even
using the API provided by VLC, you can read and leak data from arbitrary
files, can't you? So I don't really get the fuss about discovering that
lua scripts are a security issue.

-- 
Pierre Ynard
"Une âme dans un corps, c'est comme un dessin sur une feuille de papier."



More information about the vlc-devel mailing list