5cfeba72f1
These parameters can be both pointers and offsets into a bound buffer, so we need to support both even if it's possible to cause crashes this way.