Put size check before data dereference