@peff What invariant-checking do we do on pack files that people send us?  If we're not checking them, then all of git-core and libgit2 is attack surface.