overflows the string if it encounters a truncated sequence, e.g. a trailing % or %u with less than 4 hex chars.
The testsuite seems to assume that these are legal inputs. I would like to add some overflow checks and errors, instead of decoding uninitialized memory or segfaulting.
There are also no checks if the sequences are valid hex values, maybe that should also be caught?
arne