pub fn checked_range_end( offset: usize, len: usize, ) -> Result<usize, DecodeError>
Computes the end offset for a decoded range and rejects overflow.