Jim_GetWideExpr() now evaluates "safe" expressions

This means that $variable references and [commands] are not expanded.
This should mitigate security concerns when using the 'integer expression' feature.

It means that you must do:

    string repeat a $i*4

Not:

    string repeat a {$i*4}

Signed-off-by: Steve Bennett <steveb@workware.net.au>

1 files changed, 1 insertions, 0 deletions

diff --git a/jim.h b/jim.h
index 8bc90ab..79bfc0c 100644
--- a/jim.h
+++ b/jim.h
@@ -547,6 +547,7 @@ typedef struct Jim_Interp {
                 structure. */
     int local; /* If 'local' is in effect, newly defined procs keep a reference to the old defn */
     int quitting; /* Set to 1 during Jim_FreeInterp() */
+    int safeexpr; /* Set when evaluating a "safe" expression, no var subst or command eval */
     Jim_Obj *liveList; /* Linked list of all the live objects. */
     Jim_Obj *freeList; /* Linked list of all the unused objects. */
     Jim_Obj *currentScriptObj; /* Script currently in execution. */