@hardening This was actually intended because `sizeof(LICENSE_BLOB)` is used in the allocation below. The packet parsing routine has another check against the remaining length of the stream.