md: fix input truncation in safe_delay_store()