On Sat, Sep 27, 2014 at 10:28 PM, Joe Morris <jol...@panix.com> wrote:

> Could very well be a flawed test. It's not failing on NetBSD now, but still
> is on OS X. I didn't think to grab the version for either before
>
> ubik% env X="() { :;} ; echo busted" /bin/sh -c "echo stuff"
> busted
> stuff
> ubik% echo $ZSH_VERSION
> 5.0.2
>

This is not testing zsh at all, unless you replaced /bin/sh with a copy of
zsh. The bug is that /bin/sh scanning everything in its environment for
things that look like function definitions; you injected such a thing
specifically into the environment of /bin/sh with the `env X=...`.

-- 
brandon s allbery kf8nh                               sine nomine associates
allber...@gmail.com                                  ballb...@sinenomine.net
unix, openafs, kerberos, infrastructure, xmonad        http://sinenomine.net
_______________________________________________
Tech mailing list
Tech@lists.lopsa.org
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to