mirror of
https://github.com/hanzo-fi/auth.git
synced 2026-10-30 20:33:21 +00:00
The base64.NewEncoder requires Close() to flush any remaining buffered bytes with proper padding. Without it, the final 1-2 bytes of the JSON payload could be silently dropped, producing truncated base64 that fails to decode — breaking the encode/decode round-trip. Found via fuzz testing with FuzzDecodeDelegatedState. Co-authored-by: Hanzo Dev <[email protected]>
3 lines
63 B
Plaintext
3 lines
63 B
Plaintext
go test fuzz v1
|
|
string("eyJBdXRocmVxdWVzdElEIjoi08000800In00")
|