MFH: r369261

Fix CVE-2014-3659. The original fix in 25 was not enough.

Obtained from:	http://seclists.org/oss-sec/2014/q3/690 (bash developer)
Security:	CVE-2014-3659