From c9098f1b57c0dc40e49e06ee5d0dc4dfe4fd9f69 Mon Sep 17 00:00:00 2001
From: Alexander O'Mara <me@alexomara.com>
Date: Sun, 19 Jan 2025 20:42:04 -0500
Subject: [PATCH] Test read suspicious after

---
 macho/universal.test.ts | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/macho/universal.test.ts b/macho/universal.test.ts
index 954958c..82504db 100644
--- a/macho/universal.test.ts
+++ b/macho/universal.test.ts
@@ -218,6 +218,28 @@ Deno.test('open suspicious read align', async () => {
 	assertEquals(uni.isSuspicious(), true);
 });
 
+Deno.test('open suspicious read after', async () => {
+	const data = new ArrayBuffer(1024 + 1);
+	const header = new FatHeader(data);
+	header.magic = FAT_MAGIC;
+	header.nfatArch = 2;
+
+	const arch1 = new FatArch(data, header.byteLength);
+	arch1.offset = 256;
+	arch1.size = 256 + 1;
+	arch1.align = 8;
+
+	const arch2 = new FatArch(data, header.byteLength + arch1.byteLength);
+	arch2.offset = 256 * 3;
+	arch2.size = 256;
+	arch2.align = 8;
+
+	const blob = new Blob([data]);
+	const uni = new Universal();
+	await uni.open(blob);
+	assertEquals(uni.isSuspicious(), true);
+});
+
 Deno.test('open suspicious read error', async () => {
 	const data = new ArrayBuffer(512 + 1);
 	const header = new FatHeader(data);