Index: /trunk/src/VBox/Runtime/common/vfs/vfschain.cpp
===================================================================
--- /trunk/src/VBox/Runtime/common/vfs/vfschain.cpp	(revision 66674)
+++ /trunk/src/VBox/Runtime/common/vfs/vfschain.cpp	(revision 66675)
@@ -450,8 +450,8 @@
             /* Has escape sequences, must unescape it. */
             char *pszDst = pszCopy;
-            while (cch)
+            while (cch-- > 0)
             {
                 char ch = *psz++;
-                if (ch == '\\')
+                if (ch == '\\' && cch > 0)
                 {
                     char ch2 = psz[2];
@@ -459,4 +459,5 @@
                     {
                         psz++;
+                        cch--;
                         ch = ch2;
                     }