fix to sanity check on importing raw session key info

[JacobBarthelmeh]

No description provided.

[Copilot]

Pull request overview

Adjusts the bounds check when importing raw session key material to correctly account for skipping two chunks of size sz.

Changes:

• Updates the length check from sz + idx to (sz * 2) + idx before advancing idx twice.

Comments suppressed due to low confidence (1)

src/internal.c:1

• The updated check correctly accounts for two sz advances, but (sz * 2) + idx can overflow (and wrap) if sz/idx are unsigned, potentially bypassing the bounds check and leading to out-of-bounds reads later. Prefer an overflow-safe formulation (e.g., compare using division or subtract-first): check idx > len first (if not guaranteed elsewhere), then validate sz > (len - idx) / 2 (or equivalent) before doing idx += sz twice.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[JacobBarthelmeh]

Retest this please Jenkins