summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Morphology and module updatebaserock/morphDaniel Silverstone2012-09-122-1/+14
|
* Move luacov out to a submoduleDaniel Silverstone2012-09-0913-986/+3
|
* TEST: Ensure we don't lock down during sandbox.run() testDaniel Silverstone2012-08-211-0/+2
|
* TEST: Remove dubious 'not optimised' assertDaniel Silverstone2012-08-201-1/+0
|
* OBJECTS: Don't use tostring() because it might loop via __tostring infinitelyDaniel Silverstone2012-08-161-2/+2
|
* Merge branch 'diagnosis'Daniel Silverstone2012-08-1511-39/+289
|\
| * OBJECTS: Refcount tags (proxies) so that we only pass __gc across when we ↵diagnosisDaniel Silverstone2012-08-131-4/+14
| | | | | | | | really mean it
| * TRACK: Cope with negative depths and nil tracksDaniel Silverstone2012-08-131-1/+6
| |
| * SANDBOX: Update sandbox and wrapper so that we write to stderr (dead, but ↵Daniel Silverstone2012-08-132-2/+18
| | | | | | | | who cares) if an error propagates all the way out
| * TEST: Add missing requireDaniel Silverstone2012-08-131-1/+1
| |
| * SUPPLE: Lots of diagnosis stuffDaniel Silverstone2012-08-1210-35/+254
|/
* Credits fileDaniel Silverstone2012-08-111-0/+11
|
* EXAMPLE: Add demonstration for supple.host.loadstring()Daniel Silverstone2012-08-081-0/+16
|
* HOST: Simple loadstring for the sandboxDaniel Silverstone2012-08-081-0/+5
|
* SANDBOX: Ensure the first wrappered load is direct and the rest are wrapperedDaniel Silverstone2012-08-081-2/+9
|
* SANDBOX: Ensure we use the same globals for every loadstringDaniel Silverstone2012-08-081-5/+3
|
* HOST: Allow set_globals to define a set of globals to pass to all supple ↵Daniel Silverstone2012-08-081-8/+18
| | | | sandboxes
* HOST: Ensure sandbox's FDs are more likely to be closed cleanlyDaniel Silverstone2012-08-061-2/+3
|
* EXAMPLE: Show pairs, ipairs and next working, and allow lprint() to show ↵Daniel Silverstone2012-08-051-1/+47
| | | | simple tabular returns too
* HOST: Ensure we simplify return values to local types so we can clean down ↵Daniel Silverstone2012-08-051-0/+28
| | | | if the function returns tables etc
* COMMS: if read() fails, propagate the errorDaniel Silverstone2012-08-051-1/+4
|
* SUPPLE: Ensure __next is set on proxied tables by defaultDaniel Silverstone2012-08-052-0/+6
|
* SANDBOX: Wrapper unpack() so it works transparentlyDaniel Silverstone2012-08-051-1/+14
|
* SANDBOX: Use the CAPI variants of ipairs,pairs,next for transparent proxy ↵Daniel Silverstone2012-08-051-1/+4
| | | | behaviour
* CAPI: Add pairs/ipairs/next to CAPI to support proxiesDaniel Silverstone2012-08-052-0/+149
|
* Change README with new introDaniel Silverstone2012-08-041-11/+21
|
* SUPPLE: If we're on Linux we can lock ourselves down into seccomp mode 1 ↵Daniel Silverstone2012-08-042-6/+57
| | | | with some mallopt trickery
* CAPI: rlimit the process HARD so even if it evades soft limits, it's pretty ↵Daniel Silverstone2012-08-041-0/+43
| | | | stuffed
* COMMS: Randomise the count-per-hook a little to make it harder to get aroundDaniel Silverstone2012-08-041-1/+3
|
* SUPPLE: Basic instruction count and/or memory consumption limits for the sandboxDaniel Silverstone2012-08-044-12/+84
|
* SUPPLE: Refine error reporting a little moreDaniel Silverstone2012-08-042-7/+50
|
* SUPPLE: Better support for error messages, show them in the exampleDaniel Silverstone2012-08-047-69/+144
|
* SUPPLE: Ensure clean_down happens on both endsDaniel Silverstone2012-08-033-2/+9
|
* Makefile: Installation support betterDaniel Silverstone2012-07-291-4/+11
|
* TEST: Test framework for comms and host modulesDaniel Silverstone2012-07-293-1/+102
|
* EXAMPLE: Simple exampleDaniel Silverstone2012-07-291-0/+46
|
* SUPPLE: Everything to get basic sandboxing workingDaniel Silverstone2012-07-2910-25/+282
|
* SANDBOX: Enough sandboxing to get us further. Testing the wrapper is hardDaniel Silverstone2012-07-298-19/+334
|
* WRAPPER: Initial interpreter wrapper work ready for subprocess sandboxingDaniel Silverstone2012-07-293-6/+62
|
* NotesDaniel Silverstone2012-07-281-0/+22
|
* SUPPLE.REQUEST: Support requests, responses and deserialising, and test it allDaniel Silverstone2012-07-213-1/+149
|
* SUPPLE.OBJECTS: Everything tested and managing of local and remote objects ↵Daniel Silverstone2012-07-212-4/+116
| | | | looks right
* Lots of stuffDaniel Silverstone2012-07-2111-11/+729
|
* Initial framework for SuppleDaniel Silverstone2012-07-2119-0/+1272