This blog is updated daily.
A general description is here.
Rare over-runs detected by AddressSanitizer in ‘substr()’ and its replacement version have been avoided.
_Inter alia_ that fix gives the documented behaviour for ‘substr(x, 1, 2) <- ""’ (subsequently reported as PR#16214).