Bound check

[Calascibetta Romain]

See @cfcs comment on #70

This leads to undefined behavior if off or len are out of bounds.
I think that's fine for the unsafe_feed_bigstring interface, but I am a bit skeptical about the lack of length validation in feed_bigstring.