Test with the output buffer size up to *and including* the expected output size plus one. `... < expected->len + 1` was evidently a mistake. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>