[pdq]

Don’t you need a bounds check?

    for len(buf) > 4 {

[thedance]

Sure, that's why I put that last remark. But you might already know before hitting this block that the message is perfectly formed.