Log In  


Previously, gonengazit found some infinite token exploits here and zep fixed them, but looks like they're not all gone yet - I stumbled upon one that still happens:

x=[[[[]]
 put your infinite tokens here...
--]]

Seems like it happens because pico8 supports recursive block comments, and uses the same code to also parse long strings recursively.

But lua then parses the long string non-recursively and executes the code that pico8 thought was part of the string.

Pico8 probably should only parse block comments recursively, not long strings.

5


Ooh, fun! And this one looks even simpler than gonengazit's exploit. Don't tell zep :)



[Please log in to post a comment]