tifig v0.2.2 was discovered to contain a heap-buffer overflow via _asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp.