emo/busybox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add option to disable command execution from vi & awk

Browse Source
This commit is contained in:
Denis Vlasenko 2006-12-19 00:29:22 +00:00
parent 15b213ef5a
commit 249fabf1a3
3 changed files with 16 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
editors/Config.in
View File

@ -127,5 +127,12 @@ config FEATURE_VI_OPTIMIZE_CURSOR
This will make the cursor movement faster, but requires more memory This will make the cursor movement faster, but requires more memory
and it makes the applet a tiny bit larger. and it makes the applet a tiny bit larger.
endmenu config FEATURE_ALLOW_EXEC
bool "Allow vi and awk to execute shell commands"
default y
depends on VI || AWK
help
Enables vi and awk features which allows user to execute
shell commands (using system() C call).
endmenu

3
editors/awk.c
View File

@ -2378,7 +2378,8 @@ re_cont:
case F_sy: case F_sy:
fflush(NULL); fflush(NULL);
R.d = (L.s && *L.s) ? (system(L.s) >> 8) : 0; R.d = (ENABLE_FEATURE_ALLOW_EXEC && L.s && *L.s)
? (system(L.s) >> 8) : 0;
break; break;
case F_ff: case F_ff:

8
editors/vi.c
View File

@ -660,7 +660,9 @@ static void colon(Byte * buf)
dot = find_line(b); // what line is #b dot = find_line(b); // what line is #b
dot_skip_over_ws(); dot_skip_over_ws();
} }
} else if (strncmp((char *) cmd, "!", 1) == 0) { // run a cmd }
#if ENABLE_FEATURE_ALLOW_EXEC
else if (strncmp((char *) cmd, "!", 1) == 0) { // run a cmd
// :!ls run the <cmd> // :!ls run the <cmd>
(void) alarm(0); // wait for input- no alarms (void) alarm(0); // wait for input- no alarms
place_cursor(rows - 1, 0, FALSE); // go to Status line place_cursor(rows - 1, 0, FALSE); // go to Status line
@ -670,7 +672,9 @@ static void colon(Byte * buf)
rawmode(); rawmode();
Hit_Return(); // let user see results Hit_Return(); // let user see results
(void) alarm(3); // done waiting for input (void) alarm(3); // done waiting for input
} else if (strncmp((char *) cmd, "=", i) == 0) { // where is the address }
#endif
else if (strncmp((char *) cmd, "=", i) == 0) { // where is the address
if (b < 0) { // no addr given- use defaults if (b < 0) { // no addr given- use defaults
b = e = count_lines(text, dot); b = e = count_lines(text, dot);
} }