smbwrapper/smbw.c & smbwrapper/smbw_dir.c both contain calls to string_sub() with two few parameters (the length is missing). (Luke, I'm sending you a patch).