diff options
| author | Bram Moolenaar <Bram@vim.org> | 2010-12-02 14:48:14 +0100 |
|---|---|---|
| committer | Bram Moolenaar <Bram@vim.org> | 2010-12-02 14:48:14 +0100 |
| commit | d4ddfafc2ac07d37a8c851ceb453f8872a0840ef (patch) | |
| tree | dbafd0f337ffca80b3e66cddd924ac781b5d633f | |
| parent | df6b11e95593b5c2ff7690645ffbbb0702ca1c9f (diff) | |
| download | vim-d4ddfafc2ac07d37a8c851ceb453f8872a0840ef.zip | |
updated for version 7.3.070
Problem: Can set environment variables in the sandbox, could be abused.
Solution: Disallow it.
| -rw-r--r-- | src/eval.c | 2 | ||||
| -rw-r--r-- | src/version.c | 2 |
2 files changed, 3 insertions, 1 deletions
diff --git a/src/eval.c b/src/eval.c index 7c3abf1f5..356461742 100644 --- a/src/eval.c +++ b/src/eval.c @@ -2326,7 +2326,7 @@ ex_let_one(arg, tv, copy, endchars, op) else if (endchars != NULL && vim_strchr(endchars, *skipwhite(arg)) == NULL) EMSG(_(e_letunexp)); - else + else if (!check_secure()) { c1 = name[len]; name[len] = NUL; diff --git a/src/version.c b/src/version.c index 3dfb975de..5d96698a9 100644 --- a/src/version.c +++ b/src/version.c @@ -715,6 +715,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ /**/ + 70, +/**/ 69, /**/ 68, |