add test for CVE-20146277
re-order tests so they are in ascending order