Hi,
The call to srand() added in the hash DoS fix breaks some applications using expat and the rand() function. Imagine an application creating a lot of XML parsers - if two parsers are created in the same second, the rand() function calls after the parser creation will return the same sequence of "random" numbers.
The issue has been addressed on Git master now. Closing.