Re: CVE-2014-6271: remote code execution through bash

[Chet Ramey <chet.ramey () case edu>]

On 9/25/14, 12:19 PM, Solar Designer wrote:

> I think Florian's prefix-suffix patch is actually a better way to go
> (right now, unless there's some drawback I am not yet aware of), and at
> a later time function imports should require to be enabled with a
> non-default option.

Yes, some variant of that will be the next thing to work on.

Chet
-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU    chet () case edu    http://cnswww.cns.cwru.edu/~chet/