From 103102eecab04099acc1e76d824477331b29c01f Mon Sep 17 00:00:00 2001 From: Luigi Scarso Date: Fri, 12 Mar 2021 22:55:21 +0000 Subject: Luatex: when restricted system commands is enabled os.setenv has no effect. Patched Decompress to avoid execution of arbitrary commands. git-svn-id: svn://tug.org/texlive/trunk@58292 c570f23f-e606-0410-a88d-b1316a301751 --- Build/source/texk/web2c/luatexdir/lua/luatex-core.lua | 3 +++ 1 file changed, 3 insertions(+) (limited to 'Build/source/texk/web2c/luatexdir/lua/luatex-core.lua') diff --git a/Build/source/texk/web2c/luatexdir/lua/luatex-core.lua b/Build/source/texk/web2c/luatexdir/lua/luatex-core.lua index 538d8f903ac..51cfa518d64 100644 --- a/Build/source/texk/web2c/luatexdir/lua/luatex-core.lua +++ b/Build/source/texk/web2c/luatexdir/lua/luatex-core.lua @@ -198,6 +198,9 @@ if saferoption == 1 or shellescape ~= 1 then package.searchers[4] = nil package.searchers[3] = nil + if os.setenv then + os.setenv = function(...) end + end ffi = require('ffi') if ffi then -- cgit v1.2.3