If `valuelen` is 0 and `p` equals `end`, decode_varint_param() reads an extra byte past the end of the buffer.