failure to check input buffer (`data`) boundaries in BRUN chunk