CVE-2014-6277 is only an issue if the code can be passed into
bash via environemnt as function.

That it crashes in bash itself is only a bug, but not a security issue.
Merge pull request #46 from msmeissn/master

avoid CVE-2014-6277 misdetection