Log In  

Previously, gonengazit found some infinite token exploits here and zep fixed them, but looks like they're not all gone yet - I stumbled upon one that still happens:

x=[[[[]]
 put your infinite tokens here...
--]]

Seems like it happens because pico8 supports recursive block comments, and uses the same code to also parse long strings recursively.

But lua then parses the long string non-recursively and executes the code that pico8 thought was part of the string.

Pico8 probably should only parse block comments recursively, not long strings.

P#122430 2022-12-15 00:11 ( Edited 2022-12-15 00:12)

Ooh, fun! And this one looks even simpler than gonengazit's exploit. Don't tell zep :)

P#122432 2022-12-15 00:26

[Please log in to post a comment]

Follow Lexaloffle:          
Generated 2024-03-28 16:59:53 | 0.005s | Q:9