Fixed by #6860 [CVE-2011-0281].