workaround for CVE-2014-4920