Forum Discussion

Altera_Forum's avatar
Altera_Forum
Icon for Honored Contributor rankHonored Contributor
11 years ago

How to patch vulnerability of bash in Altera Cygwin (Shellshock bug)

cygwin (https://cygwin.com/ml/cygwin-announce/2014-10/msg00004.html) is included in several Altera tooling. It is a Unix-like environment within Windows. Therefore I post this question in "Other Oper...
Altera_Forum's avatar
Altera_Forum
Icon for Honored Contributor rankHonored Contributor
11 years ago

Firstly, that is the wrong test for the vulnerability, better is: 

x='() { fubar; }; echo barfu' sh -c ""

Which should not output 'barfu'.

But I wouldn't worry about it on your development system, most things that can set environment variables can just execute the relevant command instead.