From: "K.Kosako" <kosako@...>
Date: 2001-05-22T17:22:44+09:00
Subject: [ruby-dev:13287] rb_alias_variable: should not allow alias if $SAFE>=4

$SAFE = 4で、グローバル変数のaliasを
行うことができます。

$SAFE = 4
alias $0 $SAFE


--- variable.c.orig	Wed Apr 11 16:41:32 2001
+++ variable.c	Tue May 22 17:10:35 2001
@@ -703,6 +703,8 @@
 {
     struct global_entry *entry1, *entry2;
 
+    if (rb_safe_level() >= 4)
+	rb_raise(rb_eSecurityError, "Insecure: can't alias global variable");
     entry1 = rb_global_entry(name1);
     entry2 = rb_global_entry(name2);
 
----
小迫＠ソフネック   渋谷区恵比寿1-15-1