b3732e6a-705d-4f09-867a-4051e5898f71
NO upper-bound check exists. — With XML_PARSE_HUGE enabled. Outcome: heap OOB write.