Nice to see that the layered defense approach paid off here: “this buffer overflow is stack-based and probably not exploitable on OpenBSD x86, where it appears to always smash the stack canary”, though the description leaves the door open somewhat.