tar: potential heap buffer overflow in lib/wordsplit.c when building VAR=value env strings

bash: possible heap buffer overflow via sprintf into xmalloc-sized buffer in bash_add_history