oss-sec mailing list archives

Re: Fwd: Non-upstream patches for bash


From: Roman Drahtmueller <draht () schaltsekun de>
Date: Sat, 27 Sep 2014 15:26:01 +0200 (CEST)


FWIW, I'm pretty sure I bumped into another bad-looking and probably
exploitable parser issue; for now, I sent the details privately to
Chet, Florian, and Alexander. But the bottom line is, the parser
really shouldn't be exposed to the outside world.


By way of exposing the parser to potentionally harmful content: Is the 
importing of functions the only occasion, or are there more than this?

Thanks,
Roman.


Current thread: