fixes CVE-2014-3660, CVE-2014-0191 among other issues Signed-off-by: Steven Barth <steven@midlink.org>