Patch heap overflow in Floating Point Parsing.

Provide a patch to 1.8.7 which fixes CVE-2013-4164.