IABSD.fr/src/bin/ksh

Branch : - branch - master - tag -

• Show log

  Commit

• Author : tb
  Date : 2020-02-21 18:21:23
  Hash : 96c62c75
  Message : Enforce that TMOUT is an integer literal to prevent command execution from the environment at shell initialization time. During startup, ksh calls 'eval typeset -i TMOUT="${TMOUT:-0}"'. which allows command injection via arithmetic expansion, e.g., by setting TMOUT to 'x[`/bin/echo Hi >&2`]'. Problem noted by Andras Farkas and tj, inspired by a similar issue in AT&T's ksh. Tested in snaps for two weeks. "go for it" deraadt

• Files
• CONTRIBUTORS
• LEGAL
• Makefile
• NOTES
• PROJECTS
• README
• alloc.c
• c_ksh.c
• c_sh.c
• c_test.c
• c_test.h
• c_ulimit.c
• config.h
• edit.c
• edit.h
• emacs.c
• eval.c
• exec.c
• expand.h
• expr.c
• history.c
• io.c
• jobs.c
• ksh.1
• lex.c
• lex.h
• mail.c
• main.c
• misc.c
• path.c
• sh.1
• sh.h
• shf.c
• shf.h
• syn.c
• table.c
• table.h
• trap.c
• tree.c
• tree.h
• tty.c
• tty.h
• var.c
• version.c
• vi.c