D28743 was commited, reverted and then f689cb23b2782 landed before it
was recommitted. However, D28743 included an extra length check. Redo
that functionality so we check both the number of entries as well as the
length checks for wacky data.

Sponsored by: Netflix

I re-wrote this, but if people think it's too close (it did it completely different way, but the nature of C makes it a little similar), I'll add a co-authored-by.