Fixed: some uploaded content was not passing signature validation;
needed bounds check.