| This fixes CVE-2022-3715 and is included in bash 5.2 |
| |
| See: https://bugs.gentoo.org/889878 |
| |
| diff --git a/subst.c b/subst.c |
| index 2b76256..38ee9ac 100644 |
| --- a/subst.c |
| +++ b/subst.c |
| @@ -7962,7 +7962,7 @@ parameter_brace_transform (varname, value, ind, xform, rtype, quoted, pflags, fl |
| return ((char *)NULL); |
| } |
| |
| - if (valid_parameter_transform (xform) == 0) |
| + if (xform[0] == 0 || valid_parameter_transform (xform) == 0) |
| { |
| this_command_name = oname; |
| #if 0 /* TAG: bash-5.2 Martin Schulte <gnu@schrader-schulte.de> 10/2020 */ |
