Merge changes I18e4e806,Iddf4b82a into marshmallow-cts-dev

* changes:
  Add CTS test for CVE-2016-3878
  Add test for CVE-2016-3755