You can’t trust lengths in any protocol or format.