Skip to content

Tighten string-related code requirements in the GPU fakeshader #93

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
y5nw wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Tighten string-related code requirements in the GPU fakeshader #93

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a09ba93
Disallow string concatenations in the GPU fakeshader
y5nw Apr 19, 2026
5bc68a2
Disallow string creation with single quotes
y5nw Apr 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion gpu.lua
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -762,8 +762,10 @@ local function runcommand(pos, meta, command)
-- (mod security disallows bytecode)
if command.code:byte(1) == 27 then return false, "No bytecode" end

if command.code:find('"', 1, true) or command.code:find("%[=*%[") then
if command.code:find('"', 1, true) or command.code:find("'", 1, true) or command.code:find("%[=*%[") then
return false, "Cannot create strings in shader code"
elseif command.code:find("..", 1, true) then
return false, "Cannot concatenate strings in shader code"
end

local ok, f, errmsg
Expand Down
Loading