• the incremental parser would not properly reset parsing offset
  after removing a top-level number json number, causing memory
  corruption. this is potentially a very serious vulnerability.
  (reported by Albert Gierlach).
  
• the ignore initial whitespace optimisation in the incremental
  parser could result in the parser reading beyond the end of string,
  potentially leading to parsing errors or skipping json texts.