To: vim-dev@vim.org
Subject: patch 7.0.235
Fcc: outbox
From: Bram Moolenaar <Bram@moolenaar.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
------------

Patch 7.0.235
Problem:    It is possible to use writefile() in the sandbox.
Solution:   Add a few more checks for the sandbox.
Files:      src/eval.c
    

*** ../vim-7.0.234/src/eval.c	Fri Apr 27 22:17:43 2007
--- src/eval.c	Sat Apr 28 21:36:02 2007
***************
*** 15598,15603 ****
--- 15598,15606 ----
      int		err = FALSE;
      FILE	*fd;
  
+     if (check_restricted() || check_secure())
+ 	return;
+ 
      if (argvars[1].v_type != VAR_UNKNOWN)
      {
  	/*
***************
*** 16430,16435 ****
--- 16433,16441 ----
      char_u	*s;
      int		ret = 0;
      int		c;
+ 
+     if (check_restricted() || check_secure())
+ 	return;
  
      if (argvars[0].v_type != VAR_LIST)
      {
*** ../vim-7.0.234/src/version.c	Fri Apr 27 22:17:43 2007
--- src/version.c	Sun Apr 29 13:54:29 2007
***************
*** 668,669 ****
--- 668,671 ----
  {   /* Add new patch number below this line */
+ /**/
+     235,
  /**/

-- 
Now it is such a bizarrely improbable coincidence that anything as
mind-bogglingly useful as the Babel fish could have evolved purely by chance
that some thinkers have chosen to see it as a final and clinching proof of the
NON-existence of God.
The argument goes something like this: 'I refuse to prove that I exist,' says
God, 'for proof denies faith, and without faith I am nothing.'
'But,' says Man, 'the Babel fish is a dead giveaway, isn't it?  It could not
have evolved by chance.  It proves you exist, and so therefore, by your own
arguments, you don't.  QED.'
'Oh dear,' says God, 'I hadn't thought of that,' and promptly vanishes in a
puff of logic.
'Oh, that was easy,' says Man, and for an encore goes on to prove that black
is white and gets himself killed on the next pedestrian crossing.
		-- Douglas Adams, "The Hitchhiker's Guide to the Galaxy"

 /// Bram Moolenaar -- Bram@Moolenaar.net -- http://www.Moolenaar.net   \\\
///        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
\\\        download, build and distribute -- http://www.A-A-P.org        ///
 \\\            help me help AIDS victims -- http://ICCF-Holland.org    ///