overrunning a buffer, if too long. CVE-2012-4409. Patch from http://seclists.org/oss-sec/2012/q3/396, ok benoit@