[cperciva]

Indeed, this bug was found because the Tarsnap source code is open -- someone was looking through out of curiosity when he saw the problem.