CVE-2014-6277 is only an issue if the code can be passed into
bash via environemnt as function.

That it crashes in bash itself is only a bug, but not a security issue.