mail: fix the "shell" ("!") command.

* mail/mail.h (mail_execute): Change signature. All callers updated.
* mail/shell.c (expand_bang): Change signature.  Take the
string to be expanded as the 2nd and the last command as 3rd arguments.
Always allocate the return string, even if there's nothing to expand.
(mail_execute): fix memory management.
* mail/escape.c: Update.
* mail/escape.c: Update calls to mail_execute.

@@ -173,7 +173,7 @@ escape_check_args (int argc, char **argv)
 int
 escape_shell (int argc, char **argv, compose_env_t *env)
 {
-  return mail_execute (1, argc - 1, argv + 1);
+  return mail_execute (1, argv[1], argc - 1, argv + 1);
 }
 
 /* ~:[mail-command] */
@@ -325,7 +325,7 @@ run_editor (char *ed, char *arg)
   argv[0] = ed;
   argv[1] = arg;
   argv[2] = NULL;
-  return mail_execute (1, 2, argv);
+  return mail_execute (1, arg, 2, argv);
 }
 
 static int

@@ -217,7 +217,7 @@ extern int mail_save (int argc, char **argv);
 extern int mail_sendheader (int argc, char **argv);
 extern int mail_set (int argc, char **argv);
 extern int mail_shell (int argc, char **argv);
-extern int mail_execute (int shell, int argc, char **argv);
+extern int mail_execute (int shell, char *progname, int argc, char **argv);
 extern int mail_size (int argc, char **argv);
 extern int mail_source (int argc, char **argv);
 extern int mail_summary (int argc, char **argv);

@@ -18,20 +18,21 @@
 #include "mail.h"
 
 static void
-expand_bang (char **pbuf)
+expand_bang (char **pbuf, const char *arg, const char *last)
 {
-  char *last = NULL;
-  char *tmp, *p, *q;
+  char *tmp, *q;
+  const char *p;
   size_t count = 0;
   
-  mailvar_get (&last, "gnu-last-command", mailvar_type_string, 0);
-
-  for (p = *pbuf; *p; p++)
+  for (p = arg; *p; p++)
     if (*p == '!')
       count++;
 
   if (count == 0)
+    {
+      *pbuf = xstrdup (arg);
       return;
+    }
 
   if (!last)
     {
@@ -39,8 +40,8 @@ expand_bang (char **pbuf)
       return;
     }
 
-  tmp = xmalloc (strlen (*pbuf) + count * (strlen (last) - 1) + 1);
-  for (p = *pbuf, q = tmp; *p; )
+  tmp = xmalloc (strlen (arg) + count * (strlen (last) - 1) + 1);
+  for (p = arg, q = tmp; *p; )
     {
       if (*p == '!')
 	{
@@ -49,7 +50,7 @@ expand_bang (char **pbuf)
 	  p++;
 	}
       else
-	*p++ = *q++;
+	*q++ = *p++;
     }
   *q = 0;
   
@@ -58,11 +59,12 @@ expand_bang (char **pbuf)
 }
 
 int
-mail_execute (int shell, int argc, char **argv)
+mail_execute (int shell, char *progname, int argc, char **argv)
 {
   int xargc, i, status, rc;
   char **xargv;
   char *buf;
+  int expanded; /* Indicates whether argv has been bang-expanded */
   
   if (argc == 0)
     {
@@ -75,16 +77,25 @@ mail_execute (int shell, int argc, char **argv)
     xargc = 3;
   xargv = xcalloc (xargc + 1, sizeof (xargv[0]));
   
-  for (i = 0; i < argc; i++)
-    xargv[i] = argv[i];
-
   /* Expand arguments if required */
   if (mailvar_get (NULL, "bang", mailvar_type_boolean, 0) == 0)
     {
       int i;
+      char *last = NULL;
       
-      for (i = 0; i < xargc; i++)
-	expand_bang (xargv + i);
+      mailvar_get (&last, "gnu-last-command", mailvar_type_string, 0);
+      expand_bang (xargv, progname, last);
+      for (i = 1; i < argc; i++)
+	expand_bang (xargv + i, argv[i], last);
+      expanded = 1;
+    }
+  else
+    {
+      if (argc)
+	xargv[0] = progname;
+      for (i = 1; i < argc; i++)
+	xargv[i] = argv[i];
+      expanded = 0;
     }
   
   /* Reconstruct the command line and save it to gnu-last-command variable.
@@ -96,14 +107,25 @@ mail_execute (int shell, int argc, char **argv)
 
   if (shell)
     {
+      if (expanded)
+	{
+	  for (i = 0; i < argc; i++)
+	    free (xargv[i]);
+	  expanded = 0;
+	}
+      
       xargv[0] = getenv ("SHELL");
       if (argc == 0)
+	{
 	  xargv[1] = NULL;
+	  xargc = 1;
+	}
       else
 	{
 	  xargv[1] = "-c";
 	  xargv[2] = buf;
 	  xargv[3] = NULL;
+	  xargc = 3;
 	}
     }  
   
@@ -117,6 +139,9 @@ mail_execute (int shell, int argc, char **argv)
     mu_diag_output (MU_DIAG_NOTICE, ....
   */
   free (buf);
+  if (expanded)
+    for (i = 0; i < argc; i++)
+      free (xargv[i]);
   free (xargv);
   return rc;
 }
@@ -130,18 +155,11 @@ int
 mail_shell (int argc, char **argv)
 {
   if (argv[0][0] == '!' && strlen (argv[0]) > 1)
-    {
-      argv[0][0] = ' ';
-      return mail_execute (1, argc, argv);
-    }
+    return mail_execute (1, argv[0] + 1, argc, argv);
   else if (argc > 1)
-    {
-      return mail_execute (0, argc-1, argv+1);
-    }
+    return mail_execute (0, argv[1], argc-1, argv+1);
   else
-    {
-      return mail_execute (1, 0, NULL);
-    }
+    return mail_execute (1, NULL, 0, NULL);
   return 1;
 }