From 235a98afa43a582f7269e5a8e188bdbf80697554 Mon Sep 17 00:00:00 2001
From: MihailRis <mexaruc@gmail.com>
Date: Thu, 26 Feb 2026 00:12:19 +0300
Subject: [PATCH] fix: FFI library access from non-built-in scripts
 vulnerability

---
 src/logic/scripting/lua/lua_engine.cpp | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/logic/scripting/lua/lua_engine.cpp b/src/logic/scripting/lua/lua_engine.cpp
index eef391b54..fa71ab070 100644
--- a/src/logic/scripting/lua/lua_engine.cpp
+++ b/src/logic/scripting/lua/lua_engine.cpp
@@ -192,5 +192,10 @@ State* lua::create_state(const EnginePaths& paths, StateType stateType) {
         }
         pop(L);
     }
+
+    if (stateType == StateType::GENERATOR) {
+        pushnil(L);
+        setglobal(L, "ffi");
+    }
     return L;
 }