Problem and fix originally reported by Kentaro Oda to the mad-dev mailing list. See http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2008-2109 for some more info.