400bed0
To: vim-dev@vim.org
400bed0
Subject: Patch 7.0.024
400bed0
Fcc: outbox
400bed0
From: Bram Moolenaar <Bram@moolenaar.net>
400bed0
Mime-Version: 1.0
400bed0
Content-Type: text/plain; charset=ISO-8859-1
400bed0
Content-Transfer-Encoding: 8bit
400bed0
------------
400bed0
400bed0
Patch 7.0.024
400bed0
Problem:    It is possible to set arbitrary "v:" variables.
400bed0
Solution:   Disallow setting "v:" variables that are not predefined.
400bed0
Files:	    src/eval.c
400bed0
400bed0
400bed0
*** ../vim-7.0.023/src/eval.c	Sat May 13 13:36:47 2006
400bed0
--- src/eval.c	Thu Jun 22 17:27:51 2006
400bed0
***************
400bed0
*** 17759,17764 ****
400bed0
--- 17763,17775 ----
400bed0
      }
400bed0
      else		    /* add a new variable */
400bed0
      {
400bed0
+ 	/* Can't add "v:" variable. */
400bed0
+ 	if (ht == &vimvarht)
400bed0
+ 	{
400bed0
+ 	    EMSG2(_(e_illvar), name);
400bed0
+ 	    return;
400bed0
+ 	}
400bed0
+ 
400bed0
  	/* Make sure the variable name is valid. */
400bed0
  	for (p = varname; *p != NUL; ++p)
400bed0
  	    if (!eval_isnamec1(*p) && (p == varname || !VIM_ISDIGIT(*p))
400bed0
*** ../vim-7.0.023/src/version.c	Thu Jun 22 16:48:43 2006
400bed0
--- src/version.c	Thu Jun 22 17:30:59 2006
400bed0
***************
400bed0
*** 668,669 ****
400bed0
--- 668,671 ----
400bed0
  {   /* Add new patch number below this line */
400bed0
+ /**/
400bed0
+     24,
400bed0
  /**/
400bed0
400bed0
-- 
400bed0
ARTHUR:  No, hang on!  Just answer the five questions ...
400bed0
GALAHAD: Three questions ...
400bed0
ARTHUR:  Three questions ...  And we shall watch ... and pray.
400bed0
                 "Monty Python and the Holy Grail" PYTHON (MONTY) PICTURES LTD
400bed0
400bed0
 /// Bram Moolenaar -- Bram@Moolenaar.net -- http://www.Moolenaar.net   \\\
400bed0
///        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
400bed0
\\\        download, build and distribute -- http://www.A-A-P.org        ///
400bed0
 \\\            help me help AIDS victims -- http://ICCF-Holland.org    ///