strnlen is completely verified