This read-past-end-of-buffer causes failures if the data following the key block isn't mapped (such as when running with an address sanitizer such as ASAN.
Attached is a proposed patch; I can commit it or jonathan can.
I'll run this locally in mozilla; we're doing some ASAN testing.
Fix read-past-end-of-key-buffer