[WoW] [5.4.7] lua_State x86

[OMLinux]

Hi folks!

How I can get lua_State ptr? How many lua_States in WoW? Is each addition and console have each own lua_State? Someone pointed that lua_API can be called not only from main thread.

P.S. I have an idea of hooking lua_open/lua_close for tracking all states (looks like not safe enough). But what about thread local storage, is lua_State ptr there?

Best regards and ty

[xalcon]

As far as I know there is only one lua_state in wow and lua by itself is not thread safe, see lua-users wiki: Threads Tutorial.
It wouldnt make sense when each addon has its own lua state, since you can access variables and functions from other addons just fine (as long as they are defined in _G, ofc :P)

I cant help you on the topic of how get a state ptr at runtime without hooking a registered function, though :/ But why would you want to do this anyway?

[OMLinux]

As far as I know there is only one lua_state in wow and lua by itself is not thread safe, see lua-users wiki: Threads Tutorial.
It wouldnt make sense when each addon has its own lua state, since you can access variables and functions from other addons just fine (as long as they are defined in _G, ofc :P)

I cant help you on the topic of how get a state ptr at runtime without hooking a registered function, though :/ But why would you want to do this anyway?

Calling lua registered C-callbacks directly from native code (for example from EndScene) allows avoiding add-on registration.

[xalcon]

well, I call the callbacks using FrameScript::ExecuteBuffer, so I dont need the lua_state. You could just reverse that function since it has to retrieve the lua_state anyhow.... or call ExecuteBuffer yourself :P

[Nonowmana]

lua_State = 0xBA5C98 (rebased)

According to FrameScript__GetContext

[OMLinux]

lua_State = 0xBA5C98 (rebased)

According to FrameScript__GetContext

Thanks you
+Rep

[ioctl]

I usually find it by looking through the disassembly for pushes of -10002 (LUA_GLOBALS), ffffd8ee in hex, and looking for constants in the preceding few lines.

  44f1f0: 8b 35 98 5c fa 00     mov    0xfa5c98,%esi    <----- Here it is.
  44f1f6: ff 75 10              pushl  0x10(%ebp)
  44f1f9: 56                    push   %esi
  44f1fa: e8 43 7a 08 00        call   0x4d6c42
  44f1ff: 68 ee d8 ff ff        push   $0xffffd8ee