再发一遍测试:
_cve-2014-6271() {
echo "CVE-2014-6271 & 7169 Test, running on Bash $BASH_VERSION"
env _cve6271='() { :;}; echo CVE-2014-6271 vulnerable' bash -c 'echo END OF BASIC TEST, should be fixed in 4.3.25.'
env _cve6271='() { (a)=>\' bash -c "echo echo 20146271"
[[ "$(cat echo)" == "20146271" ]] && echo "----CVE-2014-7169 TEST FAILED----" || echo "----CVE-2014-7169 TEST PASSED----"
rm echo &>/dev/null
unset _cve6271
}