This couldn't actually be a buffer overrun unless AES somehow turned into memcpy, but still it's good to fix it.
Nick Mathewson