[oe-commits] Catalin Popeanga : bash: Fix for exported function namespace change

git at git.openembedded.org git at git.openembedded.org
Mon Oct 13 10:20:03 UTC 2014


Module: openembedded-core.git
Branch: dora
Commit: af1f65b57dbfcaf5fc7c254dce80ac55f3a632cb
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=af1f65b57dbfcaf5fc7c254dce80ac55f3a632cb

Author: Catalin Popeanga <Catalin.Popeanga at enea.com>
Date:   Thu Oct  9 14:23:24 2014 +0200

bash: Fix for exported function namespace change

This is a followup patch to incomplete CVE-2014-6271 fix code execution via
specially-crafted environment

This patch changes the encoding bash uses for exported functions to avoid
clashes with shell variables and to avoid depending only on an environment
variable's contents to determine whether or not to interpret it as a shell
function.

(From OE-Core daisy rev: 6c51cc96d03df26d1c10867633e7a10dfbec7c45)

Signed-off-by: Sona Sarmadi <sona.sarmadi at enea.com>
Signed-off-by: Paul Eggleton <paul.eggleton at linux.intel.com>

---

 ...r-bash-exported-function-namespace-change.patch | 158 +++++++++++++++
 ...r-bash-exported-function-namespace-change.patch | 212 +++++++++++++++++++++
 meta/recipes-extended/bash/bash_3.2.48.bb          |   1 +
 meta/recipes-extended/bash/bash_4.2.bb             |   1 +
 4 files changed, 372 insertions(+)

Diff:   http://git.openembedded.org/?p=openembedded-core.git/?a=commitdiff;h=af1f65b57dbfcaf5fc7c254dce80ac55f3a632cb


More information about the Openembedded-commits mailing list