sid: sid_test: validate identifier authority on create()

Reject ia’s greater than six bytes can encompass.

1 files changed, 3 insertions, 2 deletions

diff --git a/sid.mli b/sid.mli
index 0a9fbd8..8c3a5fa 100644
--- a/sid.mli
+++ b/sid.mli
@@ -6,7 +6,8 @@ type sub_auths = Stdint.Uint32.t array
 val create : ?sa:Stdint.Uint32.t array -> Stdint.Uint64.t -> t option
 (** [create sas ia] constructs a SID with the identifier authority [ia]
     and, optionally, the subauthorities [sas]. The operation will return
-    [None] if [sa] contains more than fifteen subauthorities. *)
+    [None] if [sa] contains more than fifteen subauthorities, or if [ia]
+    exceeds 48 bits. *)
 
 val create_unsafe : Stdint.Uint32.t array -> Stdint.Uint64.t -> t
 (** [create_unsafe sas ia] constructs a SID with the identifier authority [ia]
@@ -60,7 +61,7 @@ module PacketRep :
         to channel [oc] with endianness [endian]. *)
   end
 
-(** Pre-defined SID constansts and constructors with fixed identifier
+(** Pre-defined SID constants and constructors with fixed identifier
     authority (MS-DTYP 2.4.2.4). *)
 module WellKnown :
   sig