check braindead safe_* function length interpretation is correct