emacs: wrap call-process

Provide safe working directory
This commit is contained in:
David Bremner 2021-09-11 11:04:08 -03:00
parent 9fe36d7dc7
commit e722b4f48c
7 changed files with 18 additions and 15 deletions

View file

@ -164,7 +164,7 @@ mode."
(goto-char (point-max)) (goto-char (point-max))
(insert (format "-- Key %s in message %s:\n" (insert (format "-- Key %s in message %s:\n"
fingerprint id)) fingerprint id))
(call-process notmuch-crypto-gpg-program nil t t (notmuch--call-process notmuch-crypto-gpg-program nil t t
"--batch" "--no-tty" "--list-keys" fingerprint)) "--batch" "--no-tty" "--list-keys" fingerprint))
(recenter -1)))) (recenter -1))))
@ -240,9 +240,9 @@ corresponding key when the status button is pressed."
(with-current-buffer buffer (with-current-buffer buffer
(goto-char (point-max)) (goto-char (point-max))
(insert (format "--- Retrieving key %s:\n" keyid)) (insert (format "--- Retrieving key %s:\n" keyid))
(call-process notmuch-crypto-gpg-program nil t t "--recv-keys" keyid) (notmuch--call-process notmuch-crypto-gpg-program nil t t "--recv-keys" keyid)
(insert "\n") (insert "\n")
(call-process notmuch-crypto-gpg-program nil t t "--list-keys" keyid)) (notmuch--call-process notmuch-crypto-gpg-program nil t t "--list-keys" keyid))
(recenter -1)) (recenter -1))
(notmuch-show-refresh-view))))) (notmuch-show-refresh-view)))))

View file

@ -249,7 +249,7 @@ applied to newly inserted messages)."
(setq buffer-read-only nil) (setq buffer-read-only nil)
(erase-buffer) (erase-buffer)
(let ((coding-system-for-read 'no-conversion)) (let ((coding-system-for-read 'no-conversion))
(call-process notmuch-command nil t nil "show" "--format=raw" id)) (notmuch--call-process notmuch-command nil t nil "show" "--format=raw" id))
(mime-to-mml) (mime-to-mml)
(goto-char (point-min)) (goto-char (point-min))
(when (re-search-forward "^$" nil t) (when (re-search-forward "^$" nil t)

View file

@ -195,7 +195,7 @@ will be signaled.
Otherwise the output will be returned." Otherwise the output will be returned."
(with-temp-buffer (with-temp-buffer
(let ((status (apply #'call-process notmuch-command nil t nil args)) (let ((status (apply #'notmuch--call-process notmuch-command nil t nil args))
(output (buffer-string))) (output (buffer-string)))
(notmuch-check-exit-status status (cons notmuch-command args) output) (notmuch-check-exit-status status (cons notmuch-command args) output)
output))) output)))
@ -206,7 +206,7 @@ Otherwise the output will be returned."
(defun notmuch-cli-sane-p () (defun notmuch-cli-sane-p ()
"Return t if the cli seems to be configured sanely." "Return t if the cli seems to be configured sanely."
(unless notmuch--cli-sane-p (unless notmuch--cli-sane-p
(let ((status (call-process notmuch-command nil nil nil (let ((status (notmuch--call-process notmuch-command nil nil nil
"config" "get" "user.primary_email"))) "config" "get" "user.primary_email")))
(setq notmuch--cli-sane-p (= status 0)))) (setq notmuch--cli-sane-p (= status 0))))
notmuch--cli-sane-p) notmuch--cli-sane-p)
@ -286,7 +286,7 @@ depending on the value of `notmuch-poll-script'."
(message "Polling mail...") (message "Polling mail...")
(if (stringp notmuch-poll-script) (if (stringp notmuch-poll-script)
(unless (string-empty-p notmuch-poll-script) (unless (string-empty-p notmuch-poll-script)
(unless (equal (call-process notmuch-poll-script nil nil) 0) (unless (equal (notmuch--call-process notmuch-poll-script nil nil) 0)
(error "Notmuch: poll script `%s' failed!" notmuch-poll-script))) (error "Notmuch: poll script `%s' failed!" notmuch-poll-script)))
(notmuch-call-notmuch-process "new")) (notmuch-call-notmuch-process "new"))
(message "Polling mail...done")) (message "Polling mail...done"))
@ -639,7 +639,7 @@ the given type."
;; charset is US-ASCII. RFC6657 ;; charset is US-ASCII. RFC6657
;; complicates this somewhat. ;; complicates this somewhat.
'us-ascii))))) 'us-ascii)))))
(apply #'call-process (apply #'notmuch--call-process
notmuch-command nil '(t nil) nil args) notmuch-command nil '(t nil) nil args)
(buffer-string)))))) (buffer-string))))))
(when (and cache data) (when (and cache data)
@ -882,6 +882,10 @@ default"
(notmuch--apply-with-env (notmuch--apply-with-env
#'call-process-region start end program delete buffer display args)) #'call-process-region start end program delete buffer display args))
(defun notmuch--call-process (program &optional infile destination display &rest args)
"Wrap call-process, binding DEFAULT-DIRECTORY to a safe default"
(notmuch--apply-with-env #'call-process program infile destination display args))
(defun notmuch-call-notmuch--helper (destination args) (defun notmuch-call-notmuch--helper (destination args)
"Helper for synchronous notmuch invocation commands. "Helper for synchronous notmuch invocation commands.
@ -896,7 +900,7 @@ for `call-process'. ARGS is as described for
(otherwise (otherwise
(error "Unknown keyword argument: %s" (car args))))) (error "Unknown keyword argument: %s" (car args)))))
(if (null stdin-string) (if (null stdin-string)
(apply #'call-process notmuch-command nil destination nil args) (apply #'notmuch--call-process notmuch-command nil destination nil args)
(insert stdin-string) (insert stdin-string)
(apply #'notmuch--call-process-region (point-min) (point-max) (apply #'notmuch--call-process-region (point-min) (point-max)
notmuch-command t destination nil args)))) notmuch-command t destination nil args))))

View file

@ -474,7 +474,7 @@ the From: address."
(with-current-buffer temp-buffer (with-current-buffer temp-buffer
(erase-buffer) (erase-buffer)
(let ((coding-system-for-read 'no-conversion)) (let ((coding-system-for-read 'no-conversion))
(call-process notmuch-command nil t nil (notmuch--call-process notmuch-command nil t nil
"show" "--format=raw" id)) "show" "--format=raw" id))
;; Because we process the messages in reverse order, ;; Because we process the messages in reverse order,
;; always generate a forwarded subject, then use the ;; always generate a forwarded subject, then use the

View file

@ -279,7 +279,7 @@ position of the message in the thread."
(let ((buf (generate-new-buffer (concat "*notmuch-msg-" id "*")))) (let ((buf (generate-new-buffer (concat "*notmuch-msg-" id "*"))))
(with-current-buffer buf (with-current-buffer buf
(let ((coding-system-for-read 'no-conversion)) (let ((coding-system-for-read 'no-conversion))
(call-process notmuch-command nil t nil "show" "--format=raw" id)) (notmuch--call-process notmuch-command nil t nil "show" "--format=raw" id))
,@body) ,@body)
(kill-buffer buf))))) (kill-buffer buf)))))
@ -2034,7 +2034,7 @@ to show, nil otherwise."
(pop-to-buffer-same-window buf) (pop-to-buffer-same-window buf)
(erase-buffer) (erase-buffer)
(let ((coding-system-for-read 'no-conversion)) (let ((coding-system-for-read 'no-conversion))
(call-process notmuch-command nil t nil "show" "--format=raw" id)) (notmuch--call-process notmuch-command nil t nil "show" "--format=raw" id))
(goto-char (point-min)) (goto-char (point-min))
(set-buffer-modified-p nil) (set-buffer-modified-p nil)
(setq buffer-read-only t) (setq buffer-read-only t)
@ -2086,7 +2086,7 @@ message."
;; Use the originating buffer's working directory instead of ;; Use the originating buffer's working directory instead of
;; that of the pipe buffer. ;; that of the pipe buffer.
(cd cwd) (cd cwd)
(let ((exit-code (call-process-shell-command shell-command nil buf))) (let ((exit-code (notmuch--call-process-shell-command shell-command nil buf)))
(goto-char (point-max)) (goto-char (point-max))
(set-buffer-modified-p nil) (set-buffer-modified-p nil)
(unless (zerop exit-code) (unless (zerop exit-code)

View file

@ -397,7 +397,7 @@ Return all tags if no search terms are given."
(split-string (split-string
(with-output-to-string (with-output-to-string
(with-current-buffer standard-output (with-current-buffer standard-output
(apply 'call-process notmuch-command nil t (apply 'notmuch--call-process notmuch-command nil t
nil "search" "--output=tags" "--exclude=false" search-terms))) nil "search" "--output=tags" "--exclude=false" search-terms)))
"\n+" t)) "\n+" t))

View file

@ -238,7 +238,6 @@ test_expect_equal_file $EXPECTED/notmuch-show-decrypted-message-no-crypto OUTPUT
test_begin_subtest "notmuch-show with nonexistent CWD" test_begin_subtest "notmuch-show with nonexistent CWD"
tid=$(notmuch search --limit=1 --output=threads '*' | sed s/thread://) tid=$(notmuch search --limit=1 --output=threads '*' | sed s/thread://)
test_subtest_known_broken
test_emacs "(test-log-error test_emacs "(test-log-error
(let ((default-directory \"/nonexistent\")) (let ((default-directory \"/nonexistent\"))
(notmuch-show \"$tid\")))" (notmuch-show \"$tid\")))"