d1da09f7e1
CVE-2020-11098 thanks to @antonio-morales for finding this. (cherry picked from commit c0fd449ec0870b050d350d6d844b1ea6dad4bc7d)