Denial of service

Unmarshal can panic on some inputs, possibly allowing for denial of service attacks...