I created a random mangled name generator and have thrown about 200 million random strings at the demangler.  I succeeded in crashing it twice more and those crashers have been fixed and the test suite updated with the crash cases.