Heap overflow

md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...