1
Fork 0
mirror of git://git.sv.gnu.org/emacs.git synced 2025-12-15 18:40:39 -08:00

Don't consider play-sound-file to be a 'safe' function (bug#44018)

While there are currently no known security holes in play-sound-file,
the attack surface is considerable and historically audio file
processing has had more than its share of security problems; the
benefit to risk ratio is low.

* lisp/emacs-lisp/unsafep.el: Don't mark play-sound-file as safe.
This commit is contained in:
Mattias Engdegård 2020-10-26 12:40:51 +01:00
parent a98bb620c4
commit cdb3c9d662

View file

@ -101,7 +101,7 @@ in the parse.")
;;Macros from subr.el
save-match-data unless when
;;Functions from subr.el that have side effects
split-string replace-regexp-in-string play-sound-file))
split-string replace-regexp-in-string))
(put x 'safe-function t))
;;;###autoload