Zxc200611/pocketpy
1
0
Fork 0
mirror of https://github.com/pocketpy/pocketpy synced 2025-10-20 11:30:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

jailed exec: prevent imports

Browse Source
This commit is contained in:
Benoit Favre 2025-02-28 15:07:50 +01:00
parent b77463f5b2
commit 49b4436c86
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/public/modules.c
View File

@ -69,6 +69,10 @@ int load_module_from_dll_desktop_only(const char* path) PY_RAISE PY_RETURN;
int py_import(const char* path_cstr) { int py_import(const char* path_cstr) {
VM* vm = pk_current_vm; VM* vm = pk_current_vm;
if (vm->max_steps > 0) {
ImportError("not allowed in safe context");
return -1;
}
c11_sv path = {path_cstr, strlen(path_cstr)}; c11_sv path = {path_cstr, strlen(path_cstr)};
if(path.size == 0) return ValueError("empty module name"); if(path.size == 0) return ValueError("empty module name");