18 Nov
2015
18 Nov
'15
1:38 a.m.
Random832 <random832(a)fastmail.com> writes:
I'm wondering - were there (are there?) any other
shells other than bash
that picked up this feature? How was it implemented, considering this
was the cause of the "Shellshock" vulnerability?
I was able to find the information on how it was implemented in 8th
edition: Environment strings of the form "name(){value}", contrary to
pre-shellshock bash's "name=(){value}" - the latter certainly looks like
it was inspired by the former, though.
http://man.cat-v.org/unix_8th/5/environ