Project

General

Profile

Actions

Feature #4775

open

lua: overhaul lua support

Added by Victor Julien over 1 year ago. Updated 4 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

Implement https://redmine.openinfosecfoundation.org/issues/3307#note-12:

  • vendor a specific version in
  • disallow modules by default (or at all)
  • do proper sandboxing, both for security and performance
  • enable it by default so rule vendors can rely on it to be there

Subtasks 4 (4 open0 closed)

Feature #1971: lua: make mandatoryNewOISF DevActions
Feature #2290: lua: use script as transformAssignedJeff LucovskyActions
Feature #4776: lua: vendor latest lua stableNewActions
Feature #4777: lua: implement sandboxingNewActions

Related issues 4 (3 open1 closed)

Related to Task #3307: Research: evaluate future of lua support in SuricataNewOISF DevActions
Related to Feature #1504: lua: better notification in verbose mode on script errorsNewOISF DevActions
Related to Feature #1505: lua: show lua scripts during rule (re)loadingNewOISF DevActions
Related to Feature #2871: lua: Exposing byte extract to scriptClosedJeff LucovskyActions
Actions #1

Updated by Victor Julien over 1 year ago

  • Related to Task #3307: Research: evaluate future of lua support in Suricata added
Actions #2

Updated by Victor Julien about 1 year ago

  • Related to Feature #1504: lua: better notification in verbose mode on script errors added
Actions #3

Updated by Victor Julien about 1 year ago

  • Related to Feature #1505: lua: show lua scripts during rule (re)loading added
Actions #4

Updated by Victor Julien about 1 year ago

  • Related to Feature #2871: lua: Exposing byte extract to script added
Actions #5

Updated by Jason Ish 4 months ago

Neovim has some discussion on why they use Lua 5.1 vs other versions:

https://github.com/neovim/neovim/wiki/FAQ#why-lua-51-instead-of-lua-53

Also, rlua, the previously most popular Lua bindings for Rust started with Lua 5.3 I think. 5.1 came after due to popular demand. mlua, a fork of rlua that seems to be more popular now, and also supports luajit 5.1.

By using one of these crates we can get Lua vendored for free.

Actions

Also available in: Atom PDF