[security issue] job_start/ch_open/timer_start is enabled on restricted/secure mode

[mattn]

diff --git a/src/eval.c b/src/eval.c
index 3542b77..0045967 100644
--- a/src/eval.c
+++ b/src/eval.c
@@ -10406,6 +10406,8 @@ f_ch_logfile(typval_T *argvars, typval_T *rettv UNUSED)
 f_ch_open(typval_T *argvars, typval_T *rettv)
 {
     rettv->v_type = VAR_CHANNEL;
+    if (check_restricted() || check_secure())
+       return;
     rettv->vval.v_channel = channel_open_func(argvars);
 }
 
@@ -15076,6 +15078,8 @@ f_job_setoptions(typval_T *argvars, typval_T *rettv 
UNUSED)
 f_job_start(typval_T *argvars, typval_T *rettv)
 {
     rettv->v_type = VAR_JOB;
+    if (check_restricted() || check_secure())
+       return;
     rettv->vval.v_job = job_start(argvars);
 }
 
@@ -20681,6 +20685,8 @@ f_timer_start(typval_T *argvars, typval_T *rettv)
     char_u  *callback;
     dict_T  *dict;
 
+    if (check_restricted() || check_secure())
+       return;
     if (argvars[2].v_type != VAR_UNKNOWN)
     {
        if (argvars[2].v_type != VAR_DICT

-- 
-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

--- 
You received this message because you are subscribed to the Google Groups 
"vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to vim_dev+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.