bounds-check reply from server (bb #959)