148 posts
Posted 06 February 2013 - 11:02 PM
Title: debug library
(suggestion) Is it possible to add the debug library? that would make debugging programs way easier…
(This mainly concerns the debug.getInfo() function)
sorry if I have to ask it here, but i cannot start a new topic yet.
thanks.
2447 posts
Posted 07 February 2013 - 04:29 AM
Nah. It is disabled because it could be used to break outside our sandbox - and we don't want that.
392 posts
Location
Christchurch, New Zealand
Posted 07 February 2013 - 10:25 AM
Not to mention hack every single application!
getLocal pl0x?
It could be used for some sweet hacks, but it could also be used very maliciously. I believe via the debug api you can import or call native functions, native in this case being Java. new File("/boot/vmlinuz").delete() anyone?
Hence why it is nil'd out by the sandbox. Sorry Joker.
148 posts
Posted 07 February 2013 - 10:48 AM
Shure, but what about only functions that are 'harmless'. What I would need in my programs would be the debug.getInfo(…).name function for example to make a console.
Or, you said that it is "disabled". Is there a way to enable it?
404 posts
Location
St. Petersburg
Posted 07 February 2013 - 11:52 AM
Nah. It is disabled because it could be used to break outside our sandbox - and we don't want that.
why not sandbox the debug library?
you did it for io and os
2447 posts
Posted 07 February 2013 - 02:22 PM
No, we didn't sandbox those libraries. We wrote our own replacements.
404 posts
Location
St. Petersburg
Posted 07 February 2013 - 02:41 PM
No, we didn't sandbox those libraries. We wrote our own replacements.
ok. it still wouldnt be that hard to sandbox debug.
if you want, i could PM you a script that will do that as long as it's run while the debug library is still in play
2447 posts
Posted 07 February 2013 - 02:50 PM
No debug lib!
404 posts
Location
St. Petersburg
Posted 07 February 2013 - 06:30 PM
2447 posts
Posted 07 February 2013 - 08:28 PM
Tough, it isn't getting in. It is just too big of a security risk. Sorry.
404 posts
Location
St. Petersburg
Posted 07 February 2013 - 09:34 PM
Tough, it isn't getting in. It is just too big of a security risk. Sorry.
i dont really care about it that much