BASH PATCH REPORT
			     =================

Bash-Release: 3.2
Patch-ID: bash32-040

Bug-Reported-by:	John McCabe-Dansted
Bug-Reference-ID:
Bug-Reference-URL:	https://bugs.launchpad.net/ubuntu/+source/bash/+bug/202885

Bug-Description:

When using the `set' builtin to list all shell variables, the shell uses
the wrong variable when computing the length of a variable's value.

Patch:

*** ../bash-3.2-patched/array.c	2007-03-24 14:51:03.000000000 -0400
--- array.c	2008-08-17 13:07:04.000000000 -0400
***************
*** 684,688 ****
  		valstr = element_value (ae) ? sh_double_quote (element_value(ae))
  					    : (char *)NULL;
! 		elen = STRLEN (indstr) + 8 + STRLEN (valstr);
  		RESIZE_MALLOCED_BUFFER (result, rlen, (elen + 1), rsize, rsize);
  
--- 809,813 ----
  		valstr = element_value (ae) ? sh_double_quote (element_value(ae))
  					    : (char *)NULL;
! 		elen = STRLEN (is) + 8 + STRLEN (valstr);
  		RESIZE_MALLOCED_BUFFER (result, rlen, (elen + 1), rsize, rsize);
  
*** ../bash-3.2/patchlevel.h	Thu Apr 13 08:31:04 2006
--- patchlevel.h	Mon Oct 16 14:22:54 2006
***************
*** 26,30 ****
     looks for to find the patch level (for the sccs version string). */
  
! #define PATCHLEVEL 39
  
  #endif /* _PATCHLEVEL_H_ */
--- 26,30 ----
     looks for to find the patch level (for the sccs version string). */
  
! #define PATCHLEVEL 40
  
  #endif /* _PATCHLEVEL_H_ */