regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.