6880 2014-10-23 22:22:59 +0000 Redhat/Fedora Shellshock Fix Leads To oe_terminal breakage 2014-12-18 13:20:21 +0000 1 1 7 Build System, Metadata & Runtime OE-Core core unspecified x86 Multiple RESOLVED FIXED Medium+ normal 1.8 M2 1 chris richard.purdie alexandru.c.georgescu bluelightning meta.mr.watcher meta.watcher poky.bs.watcher poky.watcher sgw georgex.l.musat --- --- No (bug/feature does not impact docs) oldest_to_newest 46550 0 chris 2014-10-23 22:22:59 +0000 Fedora/Redhat have adopted a particular fix to cve-2014-7169, commonly known as a part of the shellshock bug, which includes the patches here [1]. As a consequence, terminal spawning is broken for commands like "bitbake virtual/kernel -c menuconfig". The reason is the environment variables exported via poky/meta/classes/terminal.bbclass include names like "BASH_FUNC_xxx()" which bash itself will not interpret. An example offending line in run.do_terminal.<PID> is ... export BASH_FUNC_module()="() { eval `/usr/bin/modulecmd bash $*` \ }" ... Since the bash that is launched in the spawned terminal cannot interpret the offending line, it fails to run. The user is briefly met with a spawned terminal that immediately closes with no indication of the problem. [1] http://www.openwall.com/lists/oss-security/2014/09/25/13 47423 1 richard.purdie 2014-12-08 15:03:59 +0000 I tried to reproduce this on fedora 20 and whilst I see that bitbake exits early, menuconfig is launched successfully. Did fedora change the bash patchsets they were applying? 47426 2 richard.purdie 2014-12-08 16:32:56 +0000 FWIW I've figured this out and will send out a patch to fix things shortly. 47494 3 richard.purdie 2014-12-11 15:24:17 +0000 http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=eb2ea6fd2d2dc626ead13de1ec334d4220651612