Yes

The "Vladi bug" was found and corrected. The attached patch should correct
libcurl. Thanks for reporting this with such details!

The problem turned out to be that because there were "left" data from the
progress meter that the following downloaded files used, the momentary speed
could become negative and thus overwrite a smallish buffer.

The fix includes not using "left over" data _and_ enlarging the tiny buffer.

-- 
  Daniel Stenberg -- curl project maintainer -- http://curl.haxx.se/