Function decode 

pub fn decode(
    bytes: &[u8],
    limits: &DecodeLimits,
) -> Result<Module<Unverified>, DecodeError>

Strictly decodes untrusted bytes. Every length is checked before allocation; semantic validity remains represented by the Unverified typestate.

Errors

Returns the first malformed, noncanonical, or over-limit byte encountered, or trailing bytes after a complete module.