check required data size

internal/decoding/decoding.go

@@ -133,6 +133,10 @@ func (d *decoder) decode(rv reflect.Value, offset int) (int, error) {
 			return 0, err
 		}
 
+		if err = d.hasRequiredLeastSliceSize(o, l); err != nil {
+			return 0, err
+		}
+
 		// check fixed type
 		fixedOffset, found, err := d.asFixedSlice(rv, o, l)
 		if err != nil {
@@ -223,6 +227,10 @@ func (d *decoder) decode(rv reflect.Value, offset int) (int, error) {
 			return 0, fmt.Errorf("%v len is %d, but msgpack has %d elements", rv.Type(), rv.Len(), l)
 		}
 
+		if err = d.hasRequiredLeastSliceSize(o, l); err != nil {
+			return 0, err
+		}
+
 		// create array dynamically
 		for i := 0; i < l; i++ {
 			o, err = d.decode(rv.Index(i), o)
@@ -245,6 +253,10 @@ func (d *decoder) decode(rv reflect.Value, offset int) (int, error) {
 			return 0, err
 		}
 
+		if err = d.hasRequiredLeastMapSize(o, l); err != nil {
+			return 0, err
+		}
+
 		// check fixed type
 		fixedOffset, found, err := d.asFixedMap(rv, o, l)
 		if err != nil {

internal/decoding/interface.go

@@ -108,6 +108,10 @@ func (d *decoder) asInterface(offset int, k reflect.Kind) (interface{}, int, err
 			return nil, 0, err
 		}
 
+		if err = d.hasRequiredLeastSliceSize(o, l); err != nil {
+			return nil, 0, err
+		}
+
 		v := make([]interface{}, l)
 		for i := 0; i < l; i++ {
 			vv, o2, err := d.asInterface(o, k)
@@ -125,6 +129,9 @@ func (d *decoder) asInterface(offset int, k reflect.Kind) (interface{}, int, err
 		if err != nil {
 			return nil, 0, err
 		}
+		if err = d.hasRequiredLeastMapSize(o, l); err != nil {
+			return nil, 0, err
+		}
 		v := make(map[interface{}]interface{}, l)
 		for i := 0; i < l; i++ {
 			if d.canSetAsMapKey(o) != nil {

internal/decoding/map.go

@@ -2,6 +2,7 @@ package decoding
 
 import (
 	"encoding/binary"
+	"errors"
 	"reflect"
 
 	"github.com/shamaton/msgpack/v2/def"
@@ -80,9 +81,18 @@ func (d *decoder) mapLength(offset int, k reflect.Kind) (int, int, error) {
 		}
 		return int(binary.BigEndian.Uint32(bs)), offset, nil
 	}
+
 	return 0, 0, d.errorTemplate(code, k)
 }
 
+func (d *decoder) hasRequiredLeastMapSize(offset, length int) error {
+	// minimum check (byte length)
+	if len(d.data[offset:]) < length*2 {
+		return errors.New("data length lacks to create map")
+	}
+	return nil
+}
+
 func (d *decoder) asFixedMap(rv reflect.Value, offset int, l int) (int, bool, error) {
 	t := rv.Type()
 

internal/decoding/slice.go

@@ -2,6 +2,7 @@ package decoding
 
 import (
 	"encoding/binary"
+	"errors"
 	"reflect"
 
 	"github.com/shamaton/msgpack/v2/def"
@@ -57,6 +58,14 @@ func (d *decoder) sliceLength(offset int, k reflect.Kind) (int, int, error) {
 	return 0, 0, d.errorTemplate(code, k)
 }
 
+func (d *decoder) hasRequiredLeastSliceSize(offset, length int) error {
+	// minimum check (byte length)
+	if len(d.data[offset:]) < length {
+		return errors.New("data length lacks to create map")
+	}
+	return nil
+}
+
 func (d *decoder) asFixedSlice(rv reflect.Value, offset int, l int) (int, bool, error) {
 	t := rv.Type()
 	k := t.Elem().Kind()

internal/decoding/struct.go

@@ -61,6 +61,10 @@ func (d *decoder) setStructFromArray(rv reflect.Value, offset int, k reflect.Kin
 		return 0, err
 	}
 
+	if err = d.hasRequiredLeastSliceSize(o, l); err != nil {
+		return 0, err
+	}
+
 	// find or create reference
 	var scta *structCacheTypeArray
 	cache, findCache := mapSCTA.Load(rv.Type())
@@ -99,6 +103,10 @@ func (d *decoder) setStructFromMap(rv reflect.Value, offset int, k reflect.Kind)
 		return 0, err
 	}
 
+	if err = d.hasRequiredLeastMapSize(o, l); err != nil {
+		return 0, err
+	}
+
 	var sctm *structCacheTypeMap
 	cache, cacheFind := mapSCTM.Load(rv.Type())
 	if !cacheFind {