Fix CVE-2014-3659. The original fix in 25 was not enough.

Obtained from:	http://seclists.org/oss-sec/2014/q3/690 (bash developer)
Security:	CVE-2014-3659

(cherry picked from commit 045921b3e9bcd87a94d4d15ab29d4b36e92dcff5)