diff options
author | Chet Ramey <chet.ramey@case.edu> | 2019-11-25 00:43:03 +0100 |
---|---|---|
committer | Vasyl Gello <vasek.gello@gmail.com> | 2019-11-26 20:25:33 +0000 |
commit | ddb19f4a310205fd5e25bd4c60544612b34c44f4 (patch) | |
tree | 897174120c1fbaf5992aaad2e22264d87043e972 /builtins/complete.c | |
parent | 6a51dbac4547dea2203a012b1ded1b648f3f8c94 (diff) | |
download | android_external_bash-ddb19f4a310205fd5e25bd4c60544612b34c44f4.tar.gz android_external_bash-ddb19f4a310205fd5e25bd4c60544612b34c44f4.tar.bz2 android_external_bash-ddb19f4a310205fd5e25bd4c60544612b34c44f4.zip |
Bash-4.3 patch 48
If a malicious user can inject a value of $SHELLOPTS containing `xtrace'
and a value for $PS4 that includes a command substitution into a shell
running as root, bash will expand the command substitution as part of
expanding $PS4 when it executes a traced command.
Change-Id: I89582f14a979f733b3504cc456ce671621825680
Diffstat (limited to 'builtins/complete.c')
0 files changed, 0 insertions, 0 deletions