bash: fix CVE-2014-7169

http://www.openwall.com/lists/oss-security/2014/09/26/1