My old suggestion was adding checks for all system calls. I started doing that, but since those checks were not added to the core I found the merging to difficult. I ran out of time and had to skip it.

I still suggest adding checks for all system calls. Maybe someone else have time to catch the error now.