You're indeed correct, both on the technical issue, and the more general question of exploit demonstrations being the best way to understand vulnerability issues. Thanks for the detailed explanation.