When using customized decode error handlers, it is possible for builtin decoders
to write out-of-bounds and then crash.