The issue is still open in the upstream. But as the discussion explicitly shows the buffer overflow in the reproducer unit test, I guess we can close this but as INVALID.