[JENKINS-45661] ConsoleNote.readFrom could throw NegativeArraySizeException...

[JENKINS-45661] ConsoleNote.readFrom could throw NegativeArraySizeException and block annotation of the rest of the log.

core/src/main/java/hudson/console/ConsoleNote.java

@@ -239,6 +239,9 @@ public abstract class ConsoleNote<T> implements Serializable, Describable<Consol
                 mac = new byte[macSz];
                 decoded.readFully(mac);
                 sz = decoded.readInt();
+                if (sz < 0) {
+                    throw new IOException("Corrupt stream");
+                }
             } else {
                 mac = null;
                 sz = - macSz;