Re: bash-2.05b-013 appears to not work

[Greg Wooledge]

On Fri, Oct 17, 2014 at 10:10:36AM -0400, Dave Kalaluhi wrote:
> Locally we are using:
> 
> (for x in {1..200} ; do echo "for x$x in ; do :"; done; for x in
> {1..200} ; do echo done ; done) | bash ||
> echo "CVE-2014-7187 vulnerable, word_lineno"

As mentioned in previous emails on this topic, that test is NOT
correct for bash 2.05b because it uses the {1..200} syntax which
was not introduced until bash 3.  Replace it with a C-style for
loop.