check limits on the data.

to catch the corner case of the encoder returning unrealistic
amounts of data

diff --git a/src/bin/unit_test_attribute.c b/src/bin/unit_test_attribute.c
index 9294eb427fb18c92dc75b7e438e36ec3574115b6..6797d6d03bf10d76c70c5ccdc94cd59c84eef4ce 100644 (file)
--- a/src/bin/unit_test_attribute.c
+++ b/src/bin/unit_test_attribute.c
@@ -449,6 +449,8 @@ static inline CC_HINT(nonnull) int dump_fuzzer_data(int fd_dir, char const *text
        char            digest_str[(SHA1_DIGEST_LENGTH * 2) + 1];
        int             file_fd;
 
+       fr_assert(data_len <= COMMAND_OUTPUT_MAX);
+
        fr_sha1_init(&ctx);
        fr_sha1_update(&ctx, (uint8_t const *)text, strlen(text));
        fr_sha1_final(digest, &ctx);