In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calc_hash in map.c.
pbc project pbc