Off-by-one and off-by-two overflows in URL parsing.
vulners.com/securityvulns/securityvulns:doc:10565