more tests that reveal false positives reported in Tomcat and Bouncy
Castle