On Fri, Oct 17, 2014 at 10:10:36AM -0400, Dave Kalaluhi wrote: > Locally we are using: > > (for x in {1..200} ; do echo "for x$x in ; do :"; done; for x in > {1..200} ; do echo done ; done) | bash || > echo "CVE-2014-7187 vulnerable, word_lineno"
As mentioned in previous emails on this topic, that test is NOT correct for bash 2.05b because it uses the {1..200} syntax which was not introduced until bash 3. Replace it with a C-style for loop.