Jyrki Vesterinen 21999b1fc9 Extend the first CVE-2018-1999023 unit test to also try loadstring()
Like @gfgtdf pointed out, loadstring() is still supported by Lua in the
name of backwards compatibility, even though it was deprecated in Lua 5.2
and is no longer mentioned in Lua manual. Thus, as of committing this it's
actually possible to load Lua bytecode.

Let's unit test this to ensure that we don't reintroduce this
vulnerability.

(cherry-picked from commit aa73b836009ca98cade2d0dfca6b99cbf8d19e76)
2018-10-07 03:23:50 +00:00
..
2018-03-09 11:22:00 +11:00
2018-10-07 03:22:49 +00:00