aboutsummaryrefslogtreecommitdiffstats
path: root/parse.y
Commit message (Collapse)AuthorAgeFilesLines
* bugfix: bash executing code following func defHEADreplicant-4.2-0004replicant-4.2-0003replicant-4.2Michal Zalewski2014-11-161-2/+12
| | | | | | | | | | | This is an upstream bugfix (with slight alterations): Patch-ID: bash42-053 A combination of nested command substitutions and function importing from the environment can cause bash to execute code appearing in the environment variable value following the function definition. Change-Id: I660e59c76d0d50de52d48a0d399fe1dfef3bded8
* Bugfix: two local buffer overflowsFlorian Weimer2014-11-161-8/+28
| | | | | | | | | | | Patch from upstream (with slight changes): Patch-ID: bash42-051 There are two local buffer overflows in parse.y that can cause the shell to dump core when given many here-documents attached to a single command or many nested loops. Change-Id: I018cb4e7c120cd9d0e6827c23c65ab4875583056
* Patch CVE-2014-7169Chet Ramey2014-10-051-0/+2
| | | | | | | | | | Patch-ID: bash41-013 Under certain circumstances, bash can incorrectly save a lookahead character and return it on a subsequent call, even when reading a new line. Change-Id: I29dcf444011f77e104b6a82e8cada731e3917646 ref: http://seclists.org/oss-sec/2014/q3/734 ref: http://seclists.org/oss-sec/2014/q3/685
* Update to upstream bash 4.2Sebastian Schmidt2012-04-171-89/+184
| | | | | | | This upgrades bash to from 4.1-rc to 4.2-release. See CWRU/changelog for changes. Change-Id: I926269c300cf44fa25964b5b375a148fcf11c4b7
* initial import of bash 4.1cvpcs2010-06-021-0/+5916