Tom,

I can reproduce this now, definitely a buffer-overrun bug in the SB runtime! Thank you for bringing this to my attention. Item in review.

Friedrich