fn checked_handoff_range( base: u64, size: u64, align: usize, ) -> Result<usize, &'static str>
Pure metadata validation, performed before dereferencing a handoff address.