We have been too overly cautious not to read beyond the boundary.

ot_accesslist.c

@@ -59,7 +59,7 @@ static void accesslist_readfile( void ) {
   read_offs = map;
 
   /* We do ignore anything that is not of the form "^[:xdigit:]{40}[^:xdigit:].*" */
-  while( read_offs + 40 <= map_end ) {
+  while( read_offs <= map_end ) {
     int i;
     for( i=0; i<(int)sizeof(ot_hash); ++i ) {
       int eger1 = scan_fromhex( read_offs[ 2*i ] );