Search the web
Sign In
New User? Sign Up
vimdev · Vim (Vi IMproved) text editor developers list
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Real people. Real stories. See how Yahoo! Groups impacts members worldwide.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
Patch 6.3.081   Message List  
Reply | Forward Message #40147 of 55392 |

Patch 6.3.081
Problem: Unix: glob() may execute a shell command when it's not wanted.
(Georgi Guninski)
Solution: Verify the sandbox flag is not set.
Files: src/os_unix.c


*** ../vim-6.3.080/src/os_unix.c Sat Jan 29 16:14:42 2005
--- src/os_unix.c Tue Jul 19 22:29:34 2005
***************
*** 4700,4706 ****
/*
* Don't allow the use of backticks in secure and restricted mode.
*/
! if (secure || restricted)
for (i = 0; i < num_pat; ++i)
if (vim_strchr(pat[i], '`') != NULL
&& (check_restricted() || check_secure()))
--- 4700,4710 ----
/*
* Don't allow the use of backticks in secure and restricted mode.
*/
! if (secure || restricted
! # ifdef HAVE_SANDBOX
! || sandbox != 0
! # endif
! )
for (i = 0; i < num_pat; ++i)
if (vim_strchr(pat[i], '`') != NULL
&& (check_restricted() || check_secure()))
*** ../vim-6.3.080/src/version.c Mon Jul 4 12:19:01 2005
--- src/version.c Tue Jul 19 22:26:32 2005
***************
*** 643,644 ****
--- 643,646 ----
{ /* Add new patch number below this line */
+ /**/
+ 81,
/**/

--
With sufficient thrust, pigs fly just fine.
-- RFC 1925

/// Bram Moolenaar -- Bram@... -- http://www.Moolenaar.net \\\
/// Sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
\\\ Project leader for A-A-P -- http://www.A-A-P.org ///
\\\ Buy LOTR 3 and help AIDS victims -- http://ICCF.nl/lotr.html ///



Tue Jul 19, 2005 8:34 pm

Bram@...
Send Email Send Email

Forward
Message #40147 of 55392 |
Expand Messages Author Sort by Date

Patch 6.3.081 Problem: Unix: glob() may execute a shell command when it's not wanted. (Georgi Guninski) Solution: Verify the sandbox flag is not set. ...
Bram Moolenaar
Bram@...
Send Email
Jul 19, 2005
8:27 pm
Advanced

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help