Hi Pablo, > > > > Patch LGTM, I can take it through nf.git, I am preparing a pull > > request now. > > Actually, this chunk is missing in this patch: > Nice catch, so this confusion pointer addition leads to an out-of-bounds read either. Sent a new patch to include this spot. Thanks Lin