[ale] Question on Recent CIAC BASH Advisory

[John M. Mills]

Hello --
I followed recommendations of CIAC bulletin G-41, and installed a patched
version of bash-1.14.7, with no observed problems.  I checked my new shell:

$ bash -c 'ls\377who'
bash: ls377who: command not found

So far, so good.  Out of curiosity I then checked my old (bash-1.14.2) shell:

$ /bin/bash.old -c 'ls\377who'
/bin/bash.old: ls377who: command not found

Shucks!  What versions had the hole?  Have I really tested for it?
I'm running Linux 1.2.13, a.out, having upgraded my kernel from an earlier
Slackware release.  (ELF RSN [RealSoonNow], 2.0.x ASAID [AsSoonAsIDare].)

Regards --jmm--
 
John M. Mills, Senior Research Engineer   --   john.m.mills at gtri.gatech.edu
   Georgia Tech Research Institute, Georgia Tech, Atlanta, GA 30332-0853
        Phone contacts: 770.528.3258 (voice), 770.528.7083 (FAX)
        EMACS: 'Eight Megabytes And Constantly Swapping' -- anon