pub fn bilinear_interpolate_safe(im: &ColorImage, p: PointF32) -> Option<Color>