[Bug 440881] New: Buffer Overrun with sax2