Merge "DO NOT MERGE Add tests for security vulnerability CVE-2016-0718 am: a7b65854 -s ours am: 557faae2 -s ours" into marshmallow-cts-dev am: 3f09914e -s ours Change-Id: I299a9a3a5c31c9388561a0522d3fd071e4c4085a