{"action":"created","issue":{"url":"https://api.github.com/repos/Jeija/minetest-mod-mesecons/issues/240","labels_url":"https://api.github.com/repos/Jeija/minetest-mod-mesecons/issues/240/labels{/name}","comments_url":"https://api.github.com/repos/Jeija/minetest-mod-mesecons/issues/240/comments","events_url":"https://api.github.com/repos/Jeija/minetest-mod-mesecons/issues/240/events","html_url":"https://github.com/Jeija/minetest-mod-mesecons/issues/240","id":111989140,"number":240,"title":"Possible server crash","user":{"login":"beyondlimits","id":7702857,"avatar_url":"https://avatars.githubusercontent.com/u/7702857?v=3","gravatar_id":"","url":"https://api.github.com/users/beyondlimits","html_url":"https://github.com/beyondlimits","followers_url":"https://api.github.com/users/beyondlimits/followers","following_url":"https://api.github.com/users/beyondlimits/following{/other_user}","gists_url":"https://api.github.com/users/beyondlimits/gists{/gist_id}","starred_url":"https://api.github.com/users/beyondlimits/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/beyondlimits/subscriptions","organizations_url":"https://api.github.com/users/beyondlimits/orgs","repos_url":"https://api.github.com/users/beyondlimits/repos","events_url":"https://api.github.com/users/beyondlimits/events{/privacy}","received_events_url":"https://api.github.com/users/beyondlimits/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-10-17T22:53:02Z","updated_at":"2015-10-18T09:32:47Z","closed_at":"2015-10-18T09:30:22Z","body":"Despite LuaController executed scripts being sandboxed, there is still possibility to crash the server or make it unresponsive by exploiting no size limit given for `mem` table."},"comment":{"url":"https://api.github.com/repos/Jeija/minetest-mod-mesecons/issues/comments/148995150","html_url":"https://github.com/Jeija/minetest-mod-mesecons/issues/240#issuecomment-148995150","issue_url":"https://api.github.com/repos/Jeija/minetest-mod-mesecons/issues/240","id":148995150,"user":{"login":"Jeija","id":1311964,"avatar_url":"https://avatars.githubusercontent.com/u/1311964?v=3","gravatar_id":"","url":"https://api.github.com/users/Jeija","html_url":"https://github.com/Jeija","followers_url":"https://api.github.com/users/Jeija/followers","following_url":"https://api.github.com/users/Jeija/following{/other_user}","gists_url":"https://api.github.com/users/Jeija/gists{/gist_id}","starred_url":"https://api.github.com/users/Jeija/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Jeija/subscriptions","organizations_url":"https://api.github.com/users/Jeija/orgs","repos_url":"https://api.github.com/users/Jeija/repos","events_url":"https://api.github.com/users/Jeija/events{/privacy}","received_events_url":"https://api.github.com/users/Jeija/received_events","type":"User","site_admin":false},"created_at":"2015-10-18T09:32:47Z","updated_at":"2015-10-18T09:32:47Z","body":"Added a size limit. I take these kinds of stability-related issues seriously, same for the loops: It may be nice to have loops, functions etc. in your luacontroller code, but unless I can make absolutely sure this can't be exploited to make the server crash, I won't have that in mesecons by default."}}