fixed oss security issue:
http://www.openwall.com/lists/oss-security/2013/11/12/5