Is the behavior behind the Shellshock vulnerability in Bash documented or at all intentional?
This seems like an implementation bug. Apparently, the way exported functions work in bash is that they use specially-formatted environment variables. If you export a function: f() { … } it defines an environment variable like: f=”() { … }” What’s probably happening is that when the new shell sees an environment variable whose value … Read more