crash encountered. repeatable.

[Kyle Sallee]

Configuration Information [Automatically generated, do not change]:
Machine: i686
OS: linux-gnu
Compiler: gcc
Compilation CFLAGS:  -DPROGRAM='bash' -DCONF_HOSTTYPE='i686'
-DCONF_OSTYPE='linux-gnu' -DCONF_MACHTYPE='i686-pc-linux-gnu'
-DCONF_VENDOR='pc' -DLOCALEDIR='/usr/share/locale' -DPACKAGE='bash'
-DSHELL -DHAVE_CONFIG_H   -I.  -I. -I./include -I./lib   -O3
-march=native
uname output: Linux 2.6.28.5 #1 Mon Feb 16 10:28:48 MST 2009 i686 GNU/Linux
Machine Type: i686-pc-linux-gnu

Bash Version: 4.0
Patch Level: 0
Release Status: release

Description:
        Crash occurs when using bash-completion 20060301
to complete a cd command to a directory.
bash 4.0; readline 6.0 and bash-completion 20060301 are installed.
The problem does not happen when bash-completion scripts are not loaded.
http://www.caliban.org/files/bash/bash-completion-20060301.tar.bz2

# set -x
# cd /usr/b+ local 'IFS=
' cur=/usr/b i j k
+ [[ /usr/b == ?(\\)\$* ]]
+ '[' -z '' ']'
+ _filedir -d
+ local 'IFS=
' xspec
+ _expand
+ '[' /usr/b '!=' /usr/b ']'
+ [[ /usr/b == \~*/* ]]
+ [[ /usr/b == \~* ]]
+ '[' -d = -d ']'
+ COMPREPLY=(${COMPREPLY[@]:-} $( compgen -d -- $cur ))
++ compgen -d -- /usr/b
+ return 0
+ return 0

malloc: /Users/chet/src/bash/src/parse.y:5561: assertion botched
free: called with unallocated block argument
last command: set -x
Aborting...Aborted

Repeat-By:
        type "cd /usr/b" then press tab