Add some bounds checking to _reply functions

This is not even close to enough, but it should at least guarantee (with one exception) that the message is at least the size of the returned struct.