failure to check input buffer (`data`) boundaries in SS2 chunk