The unfixed ones were discovered by fuzzing. I have fixes for most of them in an in-progress PR. One that was already fixed is just a regression test I'm adding.
