Mercurial > emacs
view lisp/emacs-lisp/unsafep.el @ 110523:a5ad4f188e19
Synch Semantic to CEDET 1.0.
Move CEDET ChangeLog entries to new file lisp/cedet/ChangeLog.
* semantic.el (semantic-version): Update to 2.0.
(semantic-mode-map): Add "," and "m" bindings.
(navigate-menu): Update.
* semantic/symref.el (semantic-symref-calculate-rootdir):
New function.
(semantic-symref-detect-symref-tool): Use it.
* semantic/symref/grep.el (semantic-symref-grep-shell): New var.
(semantic-symref-perform-search): Use it. Calculate root dir with
semantic-symref-calculate-rootdir.
(semantic-symref-derive-find-filepatterns): Improve error message.
* semantic/symref/list.el
(semantic-symref-results-mode-map): New bindings.
(semantic-symref-auto-expand-results): New option.
(semantic-symref-results-dump): Obey auto-expand.
(semantic-symref-list-expand-all, semantic-symref-regexp)
(semantic-symref-list-contract-all)
(semantic-symref-list-map-open-hits)
(semantic-symref-list-update-open-hits)
(semantic-symref-list-create-macro-on-open-hit)
(semantic-symref-list-call-macro-on-open-hits): New functions.
(semantic-symref-list-menu-entries)
(semantic-symref-list-menu): New vars.
(semantic-symref-list-map-open-hits): Move cursor to beginning of
match before calling the mapped function.
* semantic/doc.el
(semantic-documentation-comment-preceeding-tag): Do nothing if the
mode doesn't provide comment-start-skip.
* semantic/scope.el
(semantic-analyze-scope-nested-tags-default): Strip duplicates.
(semantic-analyze-scoped-inherited-tag-map): Take the tag we are
looking for as part of the scoped tags list.
* semantic/html.el (semantic-default-html-setup): Add
senator-step-at-tag-classes.
* semantic/decorate/include.el
(semantic-decoration-on-unknown-includes): Change light bgcolor.
(semantic-decoration-on-includes-highlight-default): Check that
the include tag has a postion.
* semantic/complete.el (semantic-collector-local-members):
(semantic-complete-read-tag-local-members)
(semantic-complete-jump-local-members): New class and functions.
(semantic-complete-self-insert): Save excursion before completing.
* semantic/analyze/complete.el
(semantic-analyze-possible-completions-default): If no completions
are found, return the raw by-name-only completion list. Add FLAGS
arguments. Add support for 'no-tc (type constraint) and
'no-unique, or no stripping duplicates.
(semantic-analyze-possible-completions-default): Add FLAGS arg.
* semantic/util-modes.el
(semantic-stickyfunc-show-only-functions-p): New option.
(semantic-stickyfunc-fetch-stickyline): Don't show stickytext for
the very first line in a buffer.
* semantic/util.el (semantic-hack-search)
(semantic-recursive-find-nonterminal-by-name)
(semantic-current-tag-interactive): Deleted.
(semantic-describe-buffer): Fix expand-nonterminal. Add
lex-syntax-mods, type relation separator char, and command
separation char.
(semantic-sanity-check): Only message if called interactively.
* semantic/tag.el (semantic-tag-deep-copy-one-tag): Copy the
:filename property and the tag position.
* semantic/lex-spp.el (semantic-lex-spp-lex-text-string):
Add recursion limit.
* semantic/imenu.el (semantic-imenu-bucketize-type-members):
Make this buffer local, not the obsoleted variable.
* semantic/idle.el: Add breadcrumbs support.
(semantic-idle-summary-current-symbol-info-default)
(semantic-idle-tag-highlight)
(semantic-idle-completion-list-default): Use
semanticdb-without-unloaded-file-searches for speed, and to
conform to the controls that specify if the idle timer is supposed
to be parsing unparsed includes.
(semantic-idle-symbol-highlight-face)
(semantic-idle-symbol-maybe-highlight): Rename from *-summary-*.
Callers changed.
(semantic-idle-work-parse-neighboring-files-flag): Default to nil.
(semantic-idle-work-update-headers-flag): New var.
(semantic-idle-work-for-one-buffer): Use it.
(semantic-idle-local-symbol-highlight): Rename from
semantic-idle-tag-highlight.
(semantic-idle-truncate-long-summaries): New option.
* semantic/ia.el (semantic-ia-cache)
(semantic-ia-get-completions): Deleted. Callers changed.
(semantic-ia-show-variants): New command.
(semantic-ia-show-doc): If doc is empty, don't make a temp buffer.
(semantic-ia-show-summary): If there isn't anything to show, say so.
* semantic/grammar.el (semantic-grammar-create-package):
Save the buffer even in batch mode.
* semantic/fw.el
(semanticdb-without-unloaded-file-searches): New macro.
* semantic/dep.el (semantic-dependency-find-file-on-path):
Fix case dereferencing ede-object when it is a list.
* semantic/db-typecache.el (semanticdb-expand-nested-tag)
(semanticdb-typecache-faux-namespace): New functions.
(semanticdb-typecache-file-tags)
(semanticdb-typecache-merge-streams): Use them.
(semanticdb-typecache-file-tags): When deriving tags from a file,
give the mode a chance to monkey with the tag copy.
(semanticdb-typecache-find-default): Wrap find in save-excursion.
(semanticdb-typecache-find-by-name-helper): Merge found names down.
* semantic/db-global.el
(semanticdb-enable-gnu-global-in-buffer): Don't show messages if
GNU Global is not available and we don't want to throw an error.
* semantic/db-find.el (semanticdb-find-result-nth-in-buffer):
When trying to normalize the tag to a buffer, don't error if
set-buffer method doesn't exist.
* semantic/db-file.el (semanticdb-save-db): Simplify msg.
* semantic/db.el (semanticdb-refresh-table): If forcing a
refresh on a file not in a buffer, use semantic-find-file-noselect
and delete the buffer after use.
(semanticdb-current-database-list): When calculating root via
hooks, force it through true-filename and skip the list of
possible roots.
* semantic/ctxt.el (semantic-ctxt-imported-packages): New.
* semantic/analyze/debug.el
(semantic-analyzer-debug-insert-tag): Reset standard output to
current buffer.
(semantic-analyzer-debug-global-symbol)
(semantic-analyzer-debug-missing-innertype): Change "prefix" to
"symbol" in messages.
* semantic/analyze/refs.el: (semantic-analyze-refs-impl)
(semantic-analyze-refs-proto): When calculating value, make sure
the found tag is 'similar' to the originating tag.
(semantic--analyze-refs-find-tags-with-parent): Attempt to
identify matches via imported symbols of parents.
(semantic--analyze-refs-full-lookup-with-parents): Do a deep
search during the brute search.
* semantic/analyze.el
(semantic-analyze-find-tag-sequence-default): Be robust to
calculated scopes being nil.
* semantic/bovine/c.el (semantic-c-describe-environment): Add
project macro symbol array.
(semantic-c-parse-lexical-token): Add recursion limit.
(semantic-ctxt-imported-packages, semanticdb-expand-nested-tag):
New overrides.
(semantic-expand-c-tag-namelist): Split a full type from a typedef
out to its own tag.
(semantic-expand-c-tag-namelist): Do not split out a typedef'd
inline type if it is an anonymous type.
(semantic-c-reconstitute-token): Use the optional initializers as
a clue that some function is probably a constructor. When
defining the type of these constructors, split the parent name,
and use only the class part, if applicable.
* semantic/bovine/c-by.el:
* semantic/wisent/python-wy.el: Regenerate.
author | Chong Yidong <cyd@stupidchicken.com> |
---|---|
date | Sat, 18 Sep 2010 22:49:54 -0400 |
parents | 1d1d5d9bd884 |
children | 0f9cd375624d |
line wrap: on
line source
;;;; unsafep.el -- Determine whether a Lisp form is safe to evaluate ;; Copyright (C) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software Foundation, Inc. ;; Author: Jonathan Yavner <jyavner@member.fsf.org> ;; Maintainer: Jonathan Yavner <jyavner@member.fsf.org> ;; Keywords: safety lisp utility ;; This file is part of GNU Emacs. ;; GNU Emacs is free software: you can redistribute it and/or modify ;; it under the terms of the GNU General Public License as published by ;; the Free Software Foundation, either version 3 of the License, or ;; (at your option) any later version. ;; GNU Emacs is distributed in the hope that it will be useful, ;; but WITHOUT ANY WARRANTY; without even the implied warranty of ;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ;; GNU General Public License for more details. ;; You should have received a copy of the GNU General Public License ;; along with GNU Emacs. If not, see <http://www.gnu.org/licenses/>. ;;; Commentary: ;; This is a simplistic implementation that does not allow any modification of ;; buffers or global variables. It does no dataflow analysis, so functions ;; like `funcall' and `setcar' are completely disallowed. It is designed ;; for "pure Lisp" formulas, like those in spreadsheets, that don't make any ;; use of the text editing capabilities of Emacs. ;; A formula is safe if: ;; 1. It's an atom. ;; 2. It's a function call to a safe function and all arguments are safe ;; formulas. ;; 3. It's a special form whose arguments are like a function's (and, ;; catch, if, or, prog1, prog2, progn, while, unwind-protect). ;; 4. It's a special form or macro that creates safe temporary bindings ;; (condition-case, dolist, dotimes, lambda, let, let*). ;; 4. It's one of (cond, quote) that have special parsing. ;; 5. It's one of (add-to-list, setq, push, pop) and the assignment variable ;; is safe. ;; 6. It's one of (apply, mapc, mapcar, mapconcat) and its first arg is a ;; quoted safe function. ;; ;; A function is safe if: ;; 1. It's a lambda containing safe formulas. ;; 2. It's a member of list `safe-functions', so the user says it's safe. ;; 3. It's a symbol with the `side-effect-free' property, defined by the ;; byte compiler or function author. ;; 4. It's a symbol with the `safe-function' property, defined here or by ;; the function author. Value t indicates a function that is safe but ;; has innocuous side effects. Other values will someday indicate ;; functions with side effects that are not always safe. ;; The `side-effect-free' and `safe-function' properties are provided for ;; built-in functions and for functions and macros defined in subr.el. ;; ;; A temporary binding is unsafe if its symbol: ;; 1. Has the `risky-local-variable' property. ;; 2. Has a name that ends with -command, font-lock-keywords(-[0-9]+)?, ;; font-lock-syntactic-keywords, -form, -forms, -frame-alist, -function, ;; -functions, -history, -hook, -hooks, -map, -map-alist, -mode-alist, ;; -predicate, or -program. ;; ;; An assignment variable is unsafe if: ;; 1. It would be unsafe as a temporary binding. ;; 2. It doesn't already have a temporary or buffer-local binding. ;; There are unsafe forms that `unsafep' cannot detect. Beware of these: ;; 1. The form's result is a string with a display property containing a ;; form to be evaluated later, and you insert this result into a ;; buffer. Always remove display properties before inserting! ;; 2. The form alters a risky variable that was recently added to Emacs and ;; is not yet marked with the `risky-local-variable' property. ;; 3. The form uses undocumented features of built-in functions that have ;; the `side-effect-free' property. For example, in Emacs-20 if you ;; passed a circular list to `assoc', Emacs would crash. Historically, ;; problems of this kind have been few and short-lived. ;;; Code: (provide 'unsafep) (require 'byte-opt) ;Set up the `side-effect-free' properties (defcustom safe-functions nil "A list of assumed-safe functions, or t to disable `unsafep'." :group 'lisp :type '(choice (const :tag "No" nil) (const :tag "Yes" t) hook)) (defvar unsafep-vars nil "Dynamically-bound list of variables with lexical bindings at this point in the parse.") (put 'unsafep-vars 'risky-local-variable t) ;;Side-effect-free functions from subr.el (dolist (x '(assoc-default assoc-ignore-case butlast last match-string match-string-no-properties member-ignore-case remove remq)) (put x 'side-effect-free t)) ;;Other safe functions (dolist (x '(;;Special forms and catch if or prog1 prog2 progn while unwind-protect ;;Safe subrs that have some side-effects ding error message minibuffer-message random read-minibuffer signal sleep-for string-match throw y-or-n-p yes-or-no-p ;;Defsubst functions from subr.el caar cadr cdar cddr ;;Macros from subr.el save-match-data unless when with-temp-message ;;Functions from subr.el that have side effects read-passwd split-string replace-regexp-in-string play-sound-file)) (put x 'safe-function t)) ;;;###autoload (defun unsafep (form &optional unsafep-vars) "Return nil if evaluating FORM couldn't possibly do any harm. Otherwise result is a reason why FORM is unsafe. UNSAFEP-VARS is a list of symbols with local bindings." (catch 'unsafep (if (or (eq safe-functions t) ;User turned off safety-checking (atom form)) ;Atoms are never unsafe (throw 'unsafep nil)) (let* ((fun (car form)) (reason (unsafep-function fun)) arg) (cond ((not reason) ;;It's a normal function - unsafe if any arg is (unsafep-progn (cdr form))) ((eq fun 'quote) ;;Never unsafe nil) ((memq fun '(apply mapc mapcar mapconcat)) ;;Unsafe if 1st arg isn't a quoted lambda (setq arg (cadr form)) (cond ((memq (car-safe arg) '(quote function)) (setq reason (unsafep-function (cadr arg)))) ((eq (car-safe arg) 'lambda) ;;Self-quoting lambda (setq reason (unsafep arg unsafep-vars))) (t (setq reason `(unquoted ,arg)))) (or reason (unsafep-progn (cddr form)))) ((eq fun 'lambda) ;;First arg is temporary bindings (mapc #'(lambda (x) (or (memq x '(&optional &rest)) (let ((y (unsafep-variable x t))) (if y (throw 'unsafep y)) (push x unsafep-vars)))) (cadr form)) (unsafep-progn (cddr form))) ((eq fun 'let) ;;Creates temporary bindings in one step (setq unsafep-vars (nconc (mapcar #'unsafep-let (cadr form)) unsafep-vars)) (unsafep-progn (cddr form))) ((eq fun 'let*) ;;Creates temporary bindings iteratively (dolist (x (cadr form)) (push (unsafep-let x) unsafep-vars)) (unsafep-progn (cddr form))) ((eq fun 'setq) ;;Safe if odd arguments are local-var syms, evens are safe exprs (setq arg (cdr form)) (while arg (setq reason (or (unsafep-variable (car arg) nil) (unsafep (cadr arg) unsafep-vars))) (if reason (throw 'unsafep reason)) (setq arg (cddr arg)))) ((eq fun 'pop) ;;safe if arg is local-var sym (unsafep-variable (cadr form) nil)) ((eq fun 'push) ;;Safe if 2nd arg is a local-var sym (or (unsafep (cadr form) unsafep-vars) (unsafep-variable (nth 2 form) nil))) ((eq fun 'add-to-list) ;;Safe if first arg is a quoted local-var sym (setq arg (cadr form)) (if (not (eq (car-safe arg) 'quote)) `(unquoted ,arg) (or (unsafep-variable (cadr arg) nil) (unsafep-progn (cddr form))))) ((eq fun 'cond) ;;Special form with unusual syntax - safe if all args are (dolist (x (cdr form)) (setq reason (unsafep-progn x)) (if reason (throw 'unsafep reason)))) ((memq fun '(dolist dotimes)) ;;Safe if COUNT and RESULT are safe. VAR is bound while checking BODY. (setq arg (cadr form)) (or (unsafep-progn (cdr arg)) (let ((unsafep-vars (cons (car arg) unsafep-vars))) (unsafep-progn (cddr form))))) ((eq fun 'condition-case) ;;Special form with unusual syntax - safe if all args are (or (unsafep-variable (cadr form) t) (unsafep (nth 2 form) unsafep-vars) (let ((unsafep-vars (cons (cadr form) unsafep-vars))) ;;var is bound only during handlers (dolist (x (nthcdr 3 form)) (setq reason (unsafep-progn (cdr x))) (if reason (throw 'unsafep reason)))))) (t ;;First unsafep-function call above wasn't nil, no special case applies reason))))) (defun unsafep-function (fun) "Return nil if FUN is a safe function. \(Either a safe lambda or a symbol that names a safe function). Otherwise result is a reason code." (cond ((eq (car-safe fun) 'lambda) (unsafep fun unsafep-vars)) ((not (and (symbolp fun) (or (get fun 'side-effect-free) (eq (get fun 'safe-function) t) (eq safe-functions t) (memq fun safe-functions)))) `(function ,fun)))) (defun unsafep-progn (list) "Return nil if all forms in LIST are safe. Else, return the reason for the first unsafe form." (catch 'unsafep-progn (let (reason) (dolist (x list) (setq reason (unsafep x unsafep-vars)) (if reason (throw 'unsafep-progn reason)))))) (defun unsafep-let (clause) "Check the safety of a let binding. CLAUSE is a let-binding, either SYM or (SYM) or (SYM VAL). Check VAL and throw a reason to `unsafep' if unsafe. Return SYM." (let (reason sym) (if (atom clause) (setq sym clause) (setq sym (car clause) reason (unsafep (cadr clause) unsafep-vars))) (setq reason (or (unsafep-variable sym t) reason)) (if reason (throw 'unsafep reason)) sym)) (defun unsafep-variable (sym to-bind) "Return nil if SYM is safe to set or bind, or a reason why not. If TO-BIND is nil, check whether SYM is safe to set. If TO-BIND is t, check whether SYM is safe to bind." (cond ((not (symbolp sym)) `(variable ,sym)) ((risky-local-variable-p sym nil) `(risky-local-variable ,sym)) ((not (or to-bind (memq sym unsafep-vars) (local-variable-p sym))) `(global-variable ,sym)))) ;; arch-tag: 6216f98b-eb8f-467a-9c33-7a7644f50658 ;;; unsafep.el ends here