From 55db25f8933408df7f64d82e99f87dd8665fe734 Mon Sep 17 00:00:00 2001
From: shabbyrobe <code@shabbyrobe.org>
Date: Sat, 23 Feb 2019 01:53:08 +1100
Subject: [PATCH] Invalid digest check

---
 hash.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hash.go b/hash.go
index f43f285..6e98015 100644
--- a/hash.go
+++ b/hash.go
@@ -31,6 +31,9 @@ func newHashingReader(inner io.Reader, expectedMD5Base64 string) (*hashingReader
 			return nil, ErrInvalidDigest
 		}
 	}
+	if len(md5Bytes) != 16 {
+		return nil, ErrInvalidDigest
+	}
 
 	return &hashingReader{
 		inner:    inner,