[Portland-bugs] [Bug 89129] another command injection vulnerability

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Fri Feb 20 16:47:47 PST 2015


https://bugs.freedesktop.org/show_bug.cgi?id=89129

--- Comment #2 from Michael Gilbert <michael.s.gilbert at gmail.com> ---
The script you ran lacks the actual function call, the call to "testme" at the
end.  It should be:

$ cat testme
testme() {
   x=backfromthedead
   local x
   echo $x
}
testme

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/portland-bugs/attachments/20150221/8af3809d/attachment.html>


More information about the Portland-bugs mailing list