diff --git a/libr/util/sandbox.c b/libr/util/sandbox.c
index 65762af5ce..f71a854b16 100644
--- a/libr/util/sandbox.c
+++ b/libr/util/sandbox.c
@@ -1,4 +1,4 @@
-/* radare - LGPL - Copyright 2012-2013 - pancake */
+/* radare - LGPL - Copyright 2012-2015 - pancake */
 
 #include <r_util.h>
 #include <signal.h>
@@ -10,9 +10,10 @@ static int disabled = 0;
  * This function verifies that the given path is allowed. Paths are allowed only if they don't
  * contain .. components (which would indicate directory traversal) and they are relative.
  * Paths pointing into the webroot are an exception: For reaching the webroot, .. and absolute
- * paths are ok.
+ * path are ok.
  */
 R_API int r_sandbox_check_path (const char *path) {
+	size_t root_len;
 	char ch;
 	char *p;
 	/* XXX: the sandbox can be bypassed if a directory is symlink */
@@ -20,7 +21,7 @@ R_API int r_sandbox_check_path (const char *path) {
 	if (!path) return 0;
 
 	// Accessing stuff inside the webroot is ok even if we need .. or leading / for that
-	size_t root_len = strlen (R2_WWWROOT);
+	root_len = strlen (R2_WWWROOT);
 	if (R2_WWWROOT[0] && !strncmp (path, R2_WWWROOT, root_len) && (
 			R2_WWWROOT[root_len-1] == '/' || path[root_len] == '/' || path[root_len] == '\0')) {
 		path += strlen (R2_WWWROOT);
@@ -70,10 +71,13 @@ R_API int r_sandbox_system (const char *x, int n) {
 
 R_API int r_sandbox_creat (const char *path, int mode) {
 	if (enabled) {
+		return -1;
+#if 0
 		if (mode & O_CREAT) return -1;
 		if (mode & O_RDWR) return -1;
 		if (!r_sandbox_check_path (path))
 			return -1;
+#endif
 	}
 	return creat (path, mode);
 }
diff --git a/shlr/Makefile b/shlr/Makefile
index bad3e70d1e..aba91d98a1 100644
--- a/shlr/Makefile
+++ b/shlr/Makefile
@@ -6,9 +6,9 @@ CS_VER=3.0
 CS_TAR=http://capstone-engine.org/download/$(CS_VER)/capstone-$(CS_VER).tgz
 CS_TAR=
 CS_URL=https://www.github.com/aquynh/capstone.git
-CS_UPD=20150321
+CS_UPD=20150322
 CS_BRA=next
-CS_TIP=5b93f59afe97670179dec1a785b5888c9232d3e1
+CS_TIP=6a77cc7463b9ca3cc8e9e3568e8550059965e8a4
 
 .PHONY: capstone-sync capstone-build all clean mrproper libgdbr libwind