summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--safe.c4
-rw-r--r--test/ruby/test_dir.rb17
2 files changed, 19 insertions, 2 deletions
diff --git a/safe.c b/safe.c
index d790156c03..1f954ec8b9 100644
--- a/safe.c
+++ b/safe.c
@@ -90,8 +90,8 @@ rb_secure(int level)
if (level <= rb_safe_level()) {
ID caller_name = rb_frame_callee();
if (caller_name) {
- rb_raise(rb_eSecurityError, "Insecure operation `%s' at level %d",
- rb_id2name(caller_name), rb_safe_level());
+ rb_raise(rb_eSecurityError, "Insecure operation `%"PRIsVALUE"' at level %d",
+ rb_id2str(caller_name), rb_safe_level());
}
else {
rb_raise(rb_eSecurityError, "Insecure operation at level %d",
diff --git a/test/ruby/test_dir.rb b/test/ruby/test_dir.rb
index ee1210cc37..03c62da547 100644
--- a/test/ruby/test_dir.rb
+++ b/test/ruby/test_dir.rb
@@ -304,4 +304,21 @@ class TestDir < Test::Unit::TestCase
end
}
end
+
+ def test_insecure_chdir
+ assert_raise(SecurityError) do
+ proc do
+ $SAFE=3
+ Dir.chdir("/")
+ end.call
+ end
+ m = "\u{79fb 52d5}"
+ d = Class.new(Dir) {singleton_class.class_eval {alias_method m, :chdir}}
+ assert_raise_with_message(SecurityError, /#{m}/) do
+ proc do
+ $SAFE=3
+ d.__send__(m, "/")
+ end.call
+ end
+ end
end