defensive parsing of user-defined data

fuzz only basic types