Add test for CVE-2016-2018