Due to an influx of spam, we have had to impose restrictions on new accounts. Please see this wiki page for instructions on how to get full permissions. Sorry for the inconvenience.
We encode the size of dynamic arrays in two places except for strings. There is no need to validate string sizes.
When they are non-NULL, we let vn_decode_char_array make sure they are null-terminated. When they are NULL, there is nothing to be done.
/cc @ryanneph @zzyiwei