]> code.ossystems Code Review - openembedded-core.git/commit
bash: Fix for exported function namespace change
authorCatalin Popeanga <Catalin.Popeanga@enea.com>
Thu, 9 Oct 2014 12:23:24 +0000 (14:23 +0200)
committerPaul Eggleton <paul.eggleton@linux.intel.com>
Sun, 12 Oct 2014 20:24:35 +0000 (21:24 +0100)
commitaf1f65b57dbfcaf5fc7c254dce80ac55f3a632cb
tree3817add87f1311af0801d8ac7db6a8cf59cb2eab
parenta71680ec6e12c17159336dc34d904cb70155d0d7
bash: Fix for exported function namespace change

This is a followup patch to incomplete CVE-2014-6271 fix code execution via
specially-crafted environment

This patch changes the encoding bash uses for exported functions to avoid
clashes with shell variables and to avoid depending only on an environment
variable's contents to determine whether or not to interpret it as a shell
function.

(From OE-Core daisy rev: 6c51cc96d03df26d1c10867633e7a10dfbec7c45)

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
meta/recipes-extended/bash/bash-3.2.48/Fix-for-bash-exported-function-namespace-change.patch [new file with mode: 0644]
meta/recipes-extended/bash/bash-4.2/Fix-for-bash-exported-function-namespace-change.patch [new file with mode: 0644]
meta/recipes-extended/bash/bash_3.2.48.bb
meta/recipes-extended/bash/bash_4.2.bb