The moral of the story is that the kernel has a bug in its echok handling, and also the library in question should be setting the ECHOK bit. Many users will see no problem because of the details of their shell and other factors. Yet, it should be easy to make the patch.