fixed array deserialization range check