BASH PATCH REPORT ================= Bash-Release: 3.1 Patch-ID: bash31-019 Bug-Reported-by: Tavis Ormandy Bug-Reference-ID: Bug-Reference-URL: http://twitter.com/taviso/statuses/514887394294652929 Bug-Description: Under certain circumstances, bash can incorrectly save a lookahead character and return it on a subsequent call, even when reading a new line. Patch: *** ../bash-3.1.18/parse.y 2006-04-12 08:40:35.000000000 -0400 --- parse.y 2014-09-25 16:40:46.000000000 -0400 *************** *** 2501,2504 **** --- 2501,2506 ---- word_desc_to_read = (WORD_DESC *)NULL; + eol_ungetc_lookahead = 0; + last_read_token = '\n'; token_to_read = '\n'; *** ../bash-3.1.18/y.tab.c 2005-11-14 09:53:30.000000000 -0500 --- y.tab.c 2014-09-25 20:29:18.000000000 -0400 *************** *** 3831,3834 **** --- 3831,3836 ---- word_desc_to_read = (WORD_DESC *)NULL; + eol_ungetc_lookahead = 0; + last_read_token = '\n'; token_to_read = '\n'; *** ../bash-3.1/patchlevel.h Wed Jul 20 13:58:20 2005 --- patchlevel.h Wed Dec 7 13:48:42 2005 *************** *** 26,30 **** looks for to find the patch level (for the sccs version string). */ ! #define PATCHLEVEL 18 #endif /* _PATCHLEVEL_H_ */ --- 26,30 ---- looks for to find the patch level (for the sccs version string). */ ! #define PATCHLEVEL 19 #endif /* _PATCHLEVEL_H_ */