It obviously remains possible for the underlying C code to crash, but every necessary mechanism is there to provide a crash-proof API to this code from Lua.

Try running this:lua -e 'print(math.random(2147483648,2147483648))'I get:-2147483648What's up with this? Why should it overflow like this, when in general Lua supports numbers beyond 2^32? Is ...

The weakness allows a null byte injected in the username field to bypass authentication and insert malicious Lua code into session files. These files, when deserialized by the server, trigger code ...