github-mirror/fish-shell
github-mirror/fish-shell
2
0
Fork 0
mirror of https://github.com/fish-shell/fish-shell.git synced 2025-02-21 00:02:56 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

when sourcing config.fish do not redirect stderr

Browse Source 
All versions of fish prior to this change silently discarded anything written
to stderr while source a config.fish file. Apparently just to avoid having
the source command display an error if the file did not exist. This can mask
real problems. So instead this change explicitly checks whether the file is
readable and silently skips sourcing it if it isn't.

Resolves issue #2702.
This commit is contained in:
Kurtis Rader 2016-02-04 12:51:55 -08:00 committed by ridiculousfish
parent dae0f63e5b
commit 1d446b74ff
1 changed files with 18 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
src/fish.cpp
View File

@ -221,12 +221,27 @@ static struct config_paths_t determine_config_directory_paths(const char *argv0)
return paths;
}
/* Source the file config.fish in the given directory */
// Source the file config.fish in the given directory.
static void source_config_in_directory(const wcstring &dir)
{
/* We want to execute a command like 'builtin source dir/config.fish 2>/dev/null' */
// If the config.fish file doesn't exist or isn't readable silently return.
// Fish versions up thru 2.2.0 would instead try to source the file with
// stderr redirected to /dev/null to deal with that possibility.
//
// This introduces a race condition since the readability of the file can
// change between this test and the execution of the 'source' command.
// However, that is not a security problem in this context so we ignore it.
const wcstring config_pathname = dir + L"/config.fish";
const wcstring escaped_dir = escape_string(dir, ESCAPE_ALL);
const wcstring cmd = L"builtin source " + escaped_dir + L"/config.fish 2>/dev/null";
const wcstring escaped_pathname = escaped_dir + L"/config.fish";
if (waccess(config_pathname, R_OK) != 0) {
debug(2, L"not sourcing %ls (not readable or does not exist)",
escaped_pathname.c_str());
return;
}
debug(2, L"sourcing %ls", escaped_pathname.c_str());
const wcstring cmd = L"builtin source " + escaped_pathname;
parser_t &parser = parser_t::principal_parser();
parser.set_is_within_fish_initialization(true);
parser.eval(cmd, io_chain_t(), TOP);