add workaround for CVE-2013-0156