Hao@windknownarg_cnt is read from decoder->stack, which could be set to 0xfea50000 by charstring "fb ef". And this will bypass stack checking.9:06 AM · Jul 5, 20113 Retweets4 Likes