Shellshock wasn't because of a feature that no one used, just a feature that no one thought about. That feature is the mechanism for how functions are passed to

Shellshock wasn't because of a feature that no one used, just a feature that no one thought about. That feature is the mechanism for how functions are passed to subshells--something that happens automatically, out-of-view of the programmer, but is used frequently nonetheless.