matz	2008-06-26 17:46:34 +0900 (Thu, 26 Jun 2008)

  New Revision: 17578

  Modified files:
    branches/ruby_1_8/ChangeLog
    branches/ruby_1_8/variable.c

  Log:
    * variable.c (rb_f_trace_var): should not be allowed at safe level 4.  
      a patch from Keita Yamaguchi <keita.yamaguchi at gmail.com>.

  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8/ChangeLog?r1=17578&r2=17577&diff_format=u
  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8/variable.c?r1=17578&r2=17577&diff_format=u

Index: ruby_1_8/ChangeLog
===================================================================
--- ruby_1_8/ChangeLog	(revision 17577)
+++ ruby_1_8/ChangeLog	(revision 17578)
@@ -1,3 +1,8 @@
+Thu Jun 26 17:43:41 2008  Yukihiro Matsumoto  <matz@r...>
+
+	* variable.c (rb_f_trace_var): should not be allowed at safe level 4.  
+	  a patch from Keita Yamaguchi <keita.yamaguchi at gmail.com>.
+
 Wed Jun 25 18:54:54 2008  NAKAMURA Usaku  <usa@r...>
 
 	* lib/{cgi-lib,getopts,importenv}.rb: check caller[0] because when
Index: ruby_1_8/variable.c
===================================================================
--- ruby_1_8/variable.c	(revision 17577)
+++ ruby_1_8/variable.c	(revision 17578)
@@ -647,6 +647,7 @@
     struct trace_var *trace;
     st_data_t data;
 
+    rb_secure(4);
     rb_scan_args(argc, argv, "11", &var, &cmd);
     id = rb_to_id(var);
     if (!st_lookup(rb_global_tbl, id, &data)) {

--
ML: ruby-changes@q...
Info: http://www.atdot.net/~ko1/quickml/