Enable --!native for clients

Clients have actors, servers have native codegen.
Sadly its too difficult to write exploit-free native codegen processing code.

e.g. a few months ago a bug existed which shifted variables registers so:

local a = buffer.create(16)
local b = 1

In this code, if you did certain buffer writes, the registers would shift and “a” would get shifted to have the value of “b”. (this was fixed a long time ago dont get too hyped)

Now imagine if this was used to gain access to certain restricted items — maybe this ends up in a sandbox escape — things would go south pretty fast.

Roblox’s reputation would be highly damaged after an attack causes some devices to get infected.

Im guessing the reason this feature was released on servers in the first place was because they are sandboxed and security measures everywhere.

We probably have to wait a few more years until the developers are sure there are no sandbox escapes or native code is fully sandboxed.

11 Likes