[oe-commits] Catalin Popeanga : bash: Fix for exported function namespace change

git at git.openembedded.org git at git.openembedded.org
Thu Oct 16 14:06:23 UTC 2014


Module: openembedded-core.git
Branch: dylan
Commit: 998cd2c6dd3709ae0d47c845dff227680bda96f5
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=998cd2c6dd3709ae0d47c845dff227680bda96f5

Author: Catalin Popeanga <Catalin.Popeanga at enea.com>
Date:   Thu Oct  9 14:23:24 2014 +0200

bash: Fix for exported function namespace change

This is a followup patch to incomplete CVE-2014-6271 fix code execution via
specially-crafted environment

This patch changes the encoding bash uses for exported functions to avoid
clashes with shell variables and to avoid depending only on an environment
variable's contents to determine whether or not to interpret it as a shell
function.

(From OE-Core daisy rev: 6c51cc96d03df26d1c10867633e7a10dfbec7c45)

Signed-off-by: Sona Sarmadi <sona.sarmadi at enea.com>
Signed-off-by: Paul Eggleton <paul.eggleton at linux.intel.com>

---

 ...r-bash-exported-function-namespace-change.patch | 158 +++++++++++++++
 ...r-bash-exported-function-namespace-change.patch | 212 +++++++++++++++++++++
 meta/recipes-extended/bash/bash_3.2.48.bb          |   1 +
 meta/recipes-extended/bash/bash_4.2.bb             |   1 +
 4 files changed, 372 insertions(+)

Diff:   http://git.openembedded.org/?p=openembedded-core.git/?a=commitdiff;h=998cd2c6dd3709ae0d47c845dff227680bda96f5


More information about the Openembedded-commits mailing list