From 6d87e9e1c6a580609d48d4aa54a20b26b10c5b77 Mon Sep 17 00:00:00 2001 From: Bram Moolenaar Date: Mon, 7 Aug 2017 20:51:51 +0200 Subject: patch 8.0.0887: can create a logfile in the sandbox Problem: Can create a logfile in the sandbox. Solution: Disable ch_logfile() in the sandbox. (Yasuhiro Matsumoto) --- src/evalfunc.c | 3 +++ src/version.c | 2 ++ 2 files changed, 5 insertions(+) diff --git a/src/evalfunc.c b/src/evalfunc.c index 2377d1957..0703b44f1 100644 --- a/src/evalfunc.c +++ b/src/evalfunc.c @@ -1930,6 +1930,9 @@ f_ch_logfile(typval_T *argvars, typval_T *rettv UNUSED) char_u *opt = (char_u *)""; char_u buf[NUMBUFLEN]; + /* Don't open a file in restricted mode. */ + if (check_restricted() || check_secure()) + return; fname = get_tv_string(&argvars[0]); if (argvars[1].v_type == VAR_STRING) opt = get_tv_string_buf(&argvars[1], buf); diff --git a/src/version.c b/src/version.c index 4e78e31a2..29703ed71 100644 --- a/src/version.c +++ b/src/version.c @@ -769,6 +769,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ +/**/ + 887, /**/ 886, /**/ -- cgit v1.2.1