aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/bash/bash_4.2.bb
diff options
context:
space:
mode:
authorCatalin Popeanga <Catalin.Popeanga@enea.com>2014-10-09 14:23:24 +0200
committerPaul Eggleton <paul.eggleton@linux.intel.com>2014-10-12 21:24:35 +0100
commitaf1f65b57dbfcaf5fc7c254dce80ac55f3a632cb (patch)
tree3817add87f1311af0801d8ac7db6a8cf59cb2eab /meta/recipes-extended/bash/bash_4.2.bb
parenta71680ec6e12c17159336dc34d904cb70155d0d7 (diff)
downloadopenembedded-core-contrib-af1f65b57dbfcaf5fc7c254dce80ac55f3a632cb.tar.gz
bash: Fix for exported function namespace change
This is a followup patch to incomplete CVE-2014-6271 fix code execution via specially-crafted environment This patch changes the encoding bash uses for exported functions to avoid clashes with shell variables and to avoid depending only on an environment variable's contents to determine whether or not to interpret it as a shell function. (From OE-Core daisy rev: 6c51cc96d03df26d1c10867633e7a10dfbec7c45) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Diffstat (limited to 'meta/recipes-extended/bash/bash_4.2.bb')
-rw-r--r--meta/recipes-extended/bash/bash_4.2.bb1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-extended/bash/bash_4.2.bb b/meta/recipes-extended/bash/bash_4.2.bb
index e3fa39dece..72222590ad 100644
--- a/meta/recipes-extended/bash/bash_4.2.bb
+++ b/meta/recipes-extended/bash/bash_4.2.bb
@@ -23,6 +23,7 @@ SRC_URI = "${GNU_MIRROR}/bash/${BPN}-${PV}.tar.gz;name=tarball \
file://test-output.patch \
file://cve-2014-6271.patch;striplevel=0 \
file://cve-2014-7169.patch \
+ file://Fix-for-bash-exported-function-namespace-change.patch;striplevel=0 \
file://run-ptest \
"