[2.3.x] add unittests to related to the issue
CVE-2014-0095 Denial of Service