Despite this cve is disputed upstream, it is a bug anyway. Let's fix it. Signed-off-by: Caspar Zhang <caspar@linux.alibaba.com>