This includes:
- ensuring we don't go off the end of input if it's not null-terminated
- checking for overflow and underflow
- being more careful to check that numbers match JSON lexical syntax