sid: sid_test: validate identifier authority on create()

Reject ia’s greater than six bytes can encompass.

1 files changed, 1 insertions, 0 deletions

diff --git a/sid.ml b/sid.ml
index 0d5c89b..2cced76 100644
--- a/sid.ml
+++ b/sid.ml
@@ -22,6 +22,7 @@ let create_unsafe sa ia =
    the number of subauths. *)
 let create ?(sa=[||]) ia =
   if Array.length sa > max_subauth_count then None else
+  if U64.compare ia max_ident_auth > 0 then None else
   Some (create_unsafe sa ia)
 
 let get_ident_auth s = s.sid_ident_auth