Comment 53 for bug 1202952

This should be good to go with the patches in comments #48 and #49.
Requesting CVE.