Move a 1MB buffer off the stack and onto the heap.
Be stricter about the checksum field; reduce false-positives on the bid
Merge remote-tracking branch 'upstream/master' into cmake-pkgconfig