Whether this is bad in practice depends. It is declared static, so it's just a small helper function, not a major API entry point. In a review, I'd call out re

Whether this is bad in practice depends. It is declared static, so it's just a small helper function, not a major API entry point. In a review, I'd call out requirements for buffer overflow detection outside this function.