From sjamaan.ath.cx:
Last time I explained how sloppy representations can cause various vulnerabilities. While doing some research for that post I stumbled across NUL byte injection bugs in two projects. Because both have been fixed now, I feel like I can freely talk about them with a clear conscience. These projects are Chicken Scheme and the C implementation of Ruby.