Statically allocate user function arg, and check bounds