Disallow odd-length VERSIONS cells
Right now, if we receive an odd-length VERSION cell, we ignore the final byte. That's not documented in our spec, though, and doesn't seem to be actually good for anything.
We could just reject all such cells without breaking any current correct Tor server or client, and we probably should. Reported by bobnomnom.