+++ This bug was initially created as a clone of Bug #155029 +++ Derek Price alerted vendor-sec about a buffer overflow and an incorrect free. The incorrect free seems to be part of a dead codepath, I'm not 100% sure of this though. The patch for these issues is attachment 113250 [details]
removing embargo