From a32845d083f3d2528f04eebe173ed7358cd2cf14 Mon Sep 17 00:00:00 2001
From: MihailRis <mexaruc@gmail.com>
Date: Thu, 26 Feb 2026 00:12:19 +0300
Subject: [PATCH] fix: FFI library access from non-built-in scripts
 vulnerability

---
 src/logic/scripting/lua/lua_engine.cpp | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/logic/scripting/lua/lua_engine.cpp b/src/logic/scripting/lua/lua_engine.cpp
index 2a9eb59cb..5edb24fd9 100644
--- a/src/logic/scripting/lua/lua_engine.cpp
+++ b/src/logic/scripting/lua/lua_engine.cpp
@@ -194,5 +194,10 @@ State* lua::create_state(const EnginePaths& paths, StateType stateType) {
         }
         pop(L);
     }
+
+    if (stateType == StateType::GENERATOR) {
+        pushnil(L);
+        setglobal(L, "ffi");
+    }
     return L;
 }