StringIO strio_getline() can divulge arbitrary memory

(originally send by e-mail on 4 Jun 2016)

1002     if (limit > 0 && s + limit < e) {
1003     e = rb_enc_right_char_head(s, s + limit, e, get_enc(ptr));
1004     }