72 lines
2.2 KiB
Plaintext
72 lines
2.2 KiB
Plaintext
|
To: vim-dev@vim.org
|
||
|
|
Subject: patch 7.0.235
|
||
|
|
Fcc: outbox
|
||
|
|
From: Bram Moolenaar <Bram@moolenaar.net>
|
||
|
|
Mime-Version: 1.0
|
||
|
|
Content-Type: text/plain; charset=ISO-8859-1
|
||
|
|
Content-Transfer-Encoding: 8bit
|
||
|
|
------------
|
||
|
|
|
||
|
|
Patch 7.0.235
|
||
|
|
Problem: It is possible to use writefile() in the sandbox.
|
||
|
|
Solution: Add a few more checks for the sandbox.
|
||
|
|
Files: src/eval.c
|
||
|
|
|
||
|
|
|
||
|
|
*** ../vim-7.0.234/src/eval.c Fri Apr 27 22:17:43 2007
|
||
|
|
--- src/eval.c Sat Apr 28 21:36:02 2007
|
||
|
|
***************
|
||
|
|
*** 15598,15603 ****
|
||
|
|
--- 15598,15606 ----
|
||
|
|
int err = FALSE;
|
||
|
|
FILE *fd;
|
||
|
|
|
||
|
|
+ if (check_restricted() || check_secure())
|
||
|
|
+ return;
|
||
|
|
+
|
||
|
|
if (argvars[1].v_type != VAR_UNKNOWN)
|
||
|
|
{
|
||
|
|
/*
|
||
|
|
***************
|
||
|
|
*** 16430,16435 ****
|
||
|
|
--- 16433,16441 ----
|
||
|
|
char_u *s;
|
||
|
|
int ret = 0;
|
||
|
|
int c;
|
||
|
|
+
|
||
|
|
+ if (check_restricted() || check_secure())
|
||
|
|
+ return;
|
||
|
|
|
||
|
|
if (argvars[0].v_type != VAR_LIST)
|
||
|
|
{
|
||
|
|
*** ../vim-7.0.234/src/version.c Fri Apr 27 22:17:43 2007
|
||
|
|
--- src/version.c Sun Apr 29 13:54:29 2007
|
||
|
|
***************
|
||
|
|
*** 668,669 ****
|
||
|
|
--- 668,671 ----
|
||
|
|
{ /* Add new patch number below this line */
|
||
|
|
+ /**/
|
||
|
|
+ 235,
|
||
|
|
/**/
|
||
|
|
|
||
|
|
--
|
||
|
|
Now it is such a bizarrely improbable coincidence that anything as
|
||
|
|
mind-bogglingly useful as the Babel fish could have evolved purely by chance
|
||
|
|
that some thinkers have chosen to see it as a final and clinching proof of the
|
||
|
|
NON-existence of God.
|
||
|
|
The argument goes something like this: 'I refuse to prove that I exist,' says
|
||
|
|
God, 'for proof denies faith, and without faith I am nothing.'
|
||
|
|
'But,' says Man, 'the Babel fish is a dead giveaway, isn't it? It could not
|
||
|
|
have evolved by chance. It proves you exist, and so therefore, by your own
|
||
|
|
arguments, you don't. QED.'
|
||
|
|
'Oh dear,' says God, 'I hadn't thought of that,' and promptly vanishes in a
|
||
|
|
puff of logic.
|
||
|
|
'Oh, that was easy,' says Man, and for an encore goes on to prove that black
|
||
|
|
is white and gets himself killed on the next pedestrian crossing.
|
||
|
|
-- Douglas Adams, "The Hitchhiker's Guide to the Galaxy"
|
||
|
|
|
||
|
|
/// Bram Moolenaar -- Bram@Moolenaar.net -- http://www.Moolenaar.net \\\
|
||
|
|
/// sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
|
||
|
|
\\\ download, build and distribute -- http://www.A-A-P.org ///
|
||
|
|
\\\ help me help AIDS victims -- http://ICCF-Holland.org ///
|