From 2df4cd56f758f1f2f0e83ba950ec1d25601137e9 Mon Sep 17 00:00:00 2001
From: Joel Wetzell <git@jwetzell.com>
Date: Wed, 20 May 2026 17:44:01 -0500
Subject: [PATCH] add size check to chunk datalen

---
 internal/decoders/chunk.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/internal/decoders/chunk.go b/internal/decoders/chunk.go
index adac1a5..f867800 100644
--- a/internal/decoders/chunk.go
+++ b/internal/decoders/chunk.go
@@ -30,6 +30,10 @@ func DecodeChunk(bytes []byte) (chunks.Chunk, error) {
 		HasSubchunks: has_subchunks,
 	}
 
+	if len(bytes) < 4+int(header.DataLen) {
+		return chunks.Chunk{}, errors.New("chunk data length is greater than the number of bytes")
+	}
+
 	chunk_data := bytes[4 : 4+header.DataLen]
 
 	return chunks.Chunk{