[oe-commits] Catalin Popeanga : bash: Fix for exported function namespace change

git at git.openembedded.org git at git.openembedded.org
Fri Oct 10 17:07:57 UTC 2014


Module: openembedded-core.git
Branch: daisy
Commit: 6c51cc96d03df26d1c10867633e7a10dfbec7c45
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=6c51cc96d03df26d1c10867633e7a10dfbec7c45

Author: Catalin Popeanga <Catalin.Popeanga at enea.com>
Date:   Thu Oct  9 14:23:24 2014 +0200

bash: Fix for exported function namespace change

This is a followup patch to incomplete CVE-2014-6271 fix code execution via
specially-crafted environment

This patch changes the encoding bash uses for exported functions to avoid
clashes with shell variables and to avoid depending only on an environment
variable's contents to determine whether or not to interpret it as a shell
function.

Signed-off-by: Sona Sarmadi <sona.sarmadi at enea.com>

---

 ...r-bash-exported-function-namespace-change.patch | 158 +++++++++++++++++++
 ...r-bash-exported-function-namespace-change.patch | 175 +++++++++++++++++++++
 meta/recipes-extended/bash/bash_3.2.48.bb          |   1 +
 meta/recipes-extended/bash/bash_4.3.bb             |   1 +
 4 files changed, 335 insertions(+)

Diff:   http://git.openembedded.org/?p=openembedded-core.git/?a=commitdiff;h=6c51cc96d03df26d1c10867633e7a10dfbec7c45


More information about the Openembedded-commits mailing list