Update from https://crrev.com/304121

net/cert/ct_log_verifier_unittest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_log_verifier.h"
 
 #include <string>
 
 #include "base/time/time.h"
 #include "net/cert/signed_certificate_timestamp.h"
@@ skipping 71 matching lines @@
   ASSERT_TRUE(log_->SetSignedTreeHead(sth.Pass()));
 }
 
 TEST_F(CTLogVerifierTest, DoesNotSetInvalidSTH) {
   scoped_ptr<ct::SignedTreeHead> sth(new ct::SignedTreeHead());
   ct::GetSignedTreeHead(sth.get());
   sth->sha256_root_hash[0] = '\x0';
   ASSERT_FALSE(log_->SetSignedTreeHead(sth.Pass()));
 }
 
+// Test that excess data after the public key is rejected.
+TEST_F(CTLogVerifierTest, ExcessDataInPublicKey) {
+  std::string key = ct::GetTestPublicKey();
+  key += "extra";
+
+  scoped_ptr<CTLogVerifier> log = CTLogVerifier::Create(key, "testlog");
+  EXPECT_FALSE(log);
+}
+
 }  // namespace net