diff options
| -rw-r--r-- | ChangeLog | 5 | ||||
| -rw-r--r-- | variable.c | 1 |
2 files changed, 6 insertions, 0 deletions
@@ -1,3 +1,8 @@ +Thu Jun 26 17:43:41 2008 Yukihiro Matsumoto <matz@ruby-lang.org> + + * variable.c (rb_f_trace_var): should not be allowed at safe level 4. + a patch from Keita Yamaguchi <keita.yamaguchi at gmail.com>. + Wed Jun 25 18:54:54 2008 NAKAMURA Usaku <usa@ruby-lang.org> * lib/{cgi-lib,getopts,importenv}.rb: check caller[0] because when diff --git a/variable.c b/variable.c index fbb011759d..ed5bd845b8 100644 --- a/variable.c +++ b/variable.c @@ -647,6 +647,7 @@ rb_f_untrace_var(argc, argv) struct trace_var *trace; st_data_t data; + rb_secure(4); rb_scan_args(argc, argv, "11", &var, &cmd); id = rb_to_id(var); if (!st_lookup(rb_global_tbl, id, &data)) { |