The serialized form should be 10 octets of user-data plus the two octets for serial/crc. Previous implementation forgot to account for the two extra octets when allocating the final data slice.
store vs stored
The Data slice was not initialized before calling copy(dst, src)