commit 6d87e9e1c6a580609d48d4aa54a20b26b10c5b77
author Bram Moolenaar <Bram@vim.org> Mon Aug 07 20:51:51 2017 +0200
committer Bram Moolenaar <Bram@vim.org> Mon Aug 07 20:51:51 2017 +0200
tree 4ef597c215c35dc0d9a22ab4e79e23ddc258fc3d
parent f8d57a50496d854f3e82725bfde1543c9d01ff98

patch 8.0.0887: can create a logfile in the sandbox

Problem:    Can create a logfile in the sandbox.
Solution:   Disable ch_logfile() in the sandbox. (Yasuhiro Matsumoto)

src/evalfunc.c

diff --git a/src/evalfunc.c b/src/evalfunc.c
index 2377d19..0703b44 100644
--- a/src/evalfunc.c
+++ b/src/evalfunc.c
@@ -1930,6 +1930,9 @@
     char_u *opt = (char_u *)"";
     char_u buf[NUMBUFLEN];
 
+    /* Don't open a file in restricted mode. */
+    if (check_restricted() || check_secure())
+	return;
     fname = get_tv_string(&argvars[0]);
     if (argvars[1].v_type == VAR_STRING)
 	opt = get_tv_string_buf(&argvars[1], buf);

src/version.c

diff --git a/src/version.c b/src/version.c
index 4e78e31..29703ed 100644
--- a/src/version.c
+++ b/src/version.c
@@ -770,6 +770,8 @@
 static int included_patches[] =
 {   /* Add new patch number below this line */
 /**/
+    887,
+/**/
     886,
 /**/
     885,