The upstream commit fixes the main issue: the missing loop body. The question about the default behaviour remains open but should be non-critical for security, hopefully.