Re: [racket-dev] racket/fasl allows sandbox escape

2014-07-10 Thread Sam Tobin-Hochstadt
Credit for this discovery goes to Jens -- I just wrote the email. Sam On Jul 10, 2014 2:36 AM, "Matthew Flatt" wrote: > I've pushed a repair. To double-check it, change 1140 to something like > 1340, since the table of primitives changed as part of the repair. > > Thanks for the report! > > At W

Re: [racket-dev] racket/fasl allows sandbox escape

2014-07-09 Thread Matthew Flatt
I've pushed a repair. To double-check it, change 1140 to something like 1340, since the table of primitives changed as part of the repair. Thanks for the report! At Wed, 9 Jul 2014 09:39:50 -0400, Sam Tobin-Hochstadt wrote: > The following exchange with rudybot, which is running the programs in >

[racket-dev] racket/fasl allows sandbox escape

2014-07-09 Thread Sam Tobin-Hochstadt
The following exchange with rudybot, which is running the programs in a sandbox, demonstrates the issue: 09:35 rudybot: eval (let () (local-require compiler/zo-marshal compiler/zo-structs racket/fasl) (fasl->s-exp (zo-marshal (compilation-top 3 (prefix 0 '() '()) (let-void 1 #t (install-value 1 0