[foobiekr]

Idiomatic go would have you using bounded readers though.

[JulianMorrison]

Either you read data into a fixed byte[] and stop at its capacity, or you read data into an unbounded byte[] by using append, and Go looks after the capacity, either way, you can't go off the end.