More fixes discovered by fuzzing

Author: ajberkley

src/array.lisp

@@ -9,7 +9,7 @@
 	 (dimensions (loop repeat array-rank
                            collect (restore-tagged-unsigned-fixnum storage)))
 	 (displaced (funcall restore-object))
-         (array-total-size (reduce #'* dimensions)))
+         (array-total-size (if dimensions (reduce #'* dimensions) 0)))
     (unless (and (typep array-total-size 'fixnum) (>= array-total-size 0))
       (unexpected-data "Array total size is too large"))
     (check-if-too-much-data (read-storage-max-to-read storage) array-total-size)

test/cl-binary-store-tests.lisp

@@ -705,10 +705,16 @@
   ;; The below is a non-fixnum claiming to be in a fixnum array
   (finish
    (handler-case
-       (cl-binary-store::restore #(21 5 3 127 127 127 127 127 127 127 127))
+       (restore #(21 5 3 127 127 127 127 127 127 127 127))
      (invalid-input-data ())))
   (finish
    (handler-case
-       (cl-binary-store::restore #(21 5 3 127 127 127 127 127 127 127 127))
+       (restore #(21 5 3 127 127 127 127 127 127 127 127))
      (invalid-input-data ()))))
 
+
+(define-test other-fuzzing-tests
+  (finish
+   (handler-case
+       (restore #(24 53 197 0 44 60 123 20))
+     (invalid-input-data ()))))