On Sep 27, 2014, at 2:19 AM, Eric Blake <ebl...@redhat.com> wrote: > The prefix is nice for quick identification, but what is ESSENTIAL is > something that puts shell functions in a namespace that is untouchable > by normal shell variables (the "()" suffix in Florian's patch). If all > you do is add a prefix, but still leave the environment containing what > can still collide with a shell variable name, you are still vulnerable.
Repeated for truth.