TLDR InfoSec · MISCELLANEOUS
BYTECODE BREAKDOWN: UNRAVELING FACTORIO'S LUA SECURITY FLAWS
Summary from the TLDR InfoSec newsletter
This blog post provides a detailed breakdown of the flaws in Lua runtime that led to an exploit in the video game Factorio. It's possible to leak memory addresses and manipulate objects in memory by exploiting Lua's handling of numbers as doubles. This manipulation allows for security flaws like bypassing ASLR in programs using Lua.