diff options
| author | Steve Bennett <steveb@workware.net.au> | 2021-07-29 15:10:50 +1000 |
|---|---|---|
| committer | Steve Bennett <steveb@workware.net.au> | 2025-07-16 09:34:08 +1000 |
| commit | 07a005e878eddb95e47ecdf07ffcd0e306cea9f9 (patch) | |
| tree | 61265369265988bf1a8b4e52ff8835660fbdfd89 | |
| parent | 2636f8681f495fc7524005d86334ed72d5091bb4 (diff) | |
| download | jimtcl-07a005e878eddb95e47ecdf07ffcd0e306cea9f9.zip jimtcl-07a005e878eddb95e47ecdf07ffcd0e306cea9f9.tar.gz jimtcl-07a005e878eddb95e47ecdf07ffcd0e306cea9f9.tar.bz2 | |
win32: add taint check to win32.ShellExecute
Compile tested only.
Signed-off-by: Steve Bennett <steveb@workware.net.au>
| -rw-r--r-- | jim-win32.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/jim-win32.c b/jim-win32.c index 858e49d..cbc3bae 100644 --- a/jim-win32.c +++ b/jim-win32.c @@ -100,6 +100,10 @@ Win32_ShellExecute(Jim_Interp *interp, int objc, Jim_Obj * const *objv) Jim_WrongNumArgs(interp, 1, objv, "verb path ?parameters?"); return JIM_ERR; } + if (Jim_CheckTaint(interp, JIM_TAINT_ANY)) { + Jim_SetTaintError(interp, 1, objv); + return JIM_ERR; + } verb = Jim_String(objv[1]); file = Jim_String(objv[2]); GetCurrentDirectoryA(MAX_PATH + 1, cwd); |