Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > gnu.bash.bug > #14450

Re: bash brace issues (similar to shellshock)

Path csiph.com!3.us.feeder.erje.net!feeder.erje.net!news.linkpendium.com!news.linkpendium.com!panix!usenet.stanford.edu!not-for-mail
From Chet Ramey <chet.ramey@case.edu>
Newsgroups gnu.bash.bug
Subject Re: bash brace issues (similar to shellshock)
Date Mon, 6 Aug 2018 12:12:17 -0400
Lines 18
Sender chet <chet@caleb.ins.cwru.edu>
Approved bug-bash@gnu.org
Message-ID <mailman.4758.1533573588.1292.bug-bash@gnu.org> (permalink)
References <CAGF5XnnB0KTsAT1ioi2=LACiqz7dwUYKe5n5aBnJGZjFf+ZD_w@mail.gmail.com>
Reply-To chet.ramey@case.edu
NNTP-Posting-Host lists.gnu.org
Mime-Version 1.0
Content-Type text/plain; charset=us-ascii
X-Trace usenet.stanford.edu 1533573588 1358 208.118.235.17 (6 Aug 2018 16:39:48 GMT)
X-Complaints-To action@cs.stanford.edu
Cc bug-bash@gnu.org, chet@po.cwru.edu
To martinsdada03@gmail.com
Envelope-to bug-bash@gnu.org
In-Reply-To Message from martinsdada03@gmail.com of Mon, 6 Aug 2018 06:32:39 -0700 (id <CAGF5XnnB0KTsAT1ioi2=LACiqz7dwUYKe5n5aBnJGZjFf+ZD_w@mail.gmail.com>)
Read-Receipt-To chet.ramey@case.edu
X-Junkmail-Status score=8/90, host=mpv2-2015.case.edu
X-Junkmail-PrAS-Raw score=8/90, refid=2.7.2:2018.8.6.150316:17:8.317, ip=, rules=DATE_TZ_NA, __HAS_FROM, FROM_EDU_TLD, __TO_MALFORMED_2, __TO_NO_NAME, __SUBJ_REPLY, __PHISH_SPEAR_SUBJ_ALERT, __BOUNCE_CHALLENGE_SUBJ, __BOUNCE_NDR_SUBJ_EXEMPT, __HAS_CC_HDR, __MULTIPLE_RCPTS_CC_X2, __HAS_REPLYTO, __REFERENCES, __IN_REP_TO, __HAS_MSGID, __SANE_MSGID, __MIME_VERSION, __CT, __CT_TEXT_PLAIN, __REPLYTO_SAMEAS_FROM_ADDY, __REPLYTO_SAMEAS_FROM_ACC, __REPLYTO_SAMEAS_FROM_DOMAIN, __ANY_URI, __URI_WITH_PATH, __URI_NO_WWW, __CP_URI_IN_BODY, __SUBJ_ALPHA_NEGATE, __URI_IN_BODY, __URI_NOT_IMG, __NO_HTML_TAG_RAW, BODY_SIZE_700_799, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, __URI_NS, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, IN_REP_TO, MSG_THREAD, LEGITIMATE_SIGNS, __SINGLE_URI_TEXT, SINGLE_URI_IN_BODY, MULTIPLE_RCPTS, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, BODY_SIZE_2000_LESS, __MIME_TEXT_P, REPLYTO_SAMEAS_FROM, [TRUNCATED], so=2010-03-03 19:42:08, dmn=2016-08-03-0138
X-detected-operating-system by eggs.gnu.org: GNU/Linux 2.4.x-2.6.x [generic] [fuzzy]
X-Received-From 129.22.103.227
X-BeenThere bug-bash@gnu.org
X-Mailman-Version 2.1.21
Precedence list
List-Id Bug reports for the GNU Bourne Again SHell <bug-bash.gnu.org>
List-Unsubscribe <https://lists.gnu.org/mailman/options/bug-bash>, <mailto:bug-bash-request@gnu.org?subject=unsubscribe>
List-Archive <http://lists.gnu.org/archive/html/bug-bash/>
List-Post <mailto:bug-bash@gnu.org>
List-Help <mailto:bug-bash-request@gnu.org?subject=help>
List-Subscribe <https://lists.gnu.org/mailman/listinfo/bug-bash>, <mailto:bug-bash-request@gnu.org?subject=subscribe>
Xref csiph.com gnu.bash.bug:14450

Show key headers only | View raw


> Find attached details regarding bash brace issues. King regards.

What exactly is it that you think you've found?

You have assignment statements preceding a command that is one component
of a compound command.

You might have a case that in the first three statements bash should
throw an error at the assignment statement instead of treating it as
if the operators were quoted (the result of parsing it like a possible
compound assignment), but this certainly isn't anything close to a
security problem.

-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
		 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    chet@case.edu    http://tiswww.cwru.edu/~chet/

Back to gnu.bash.bug | Previous | Next | Find similar | Unroll thread


Thread

Re: bash brace issues (similar to shellshock) Chet Ramey <chet.ramey@case.edu> - 2018-08-06 12:12 -0400

csiph-web