Not bungle in the sense of overflowing the underlying buffer, but overflowing the logical buffer that is contained within it, i.e. getting the wrong slice.

Oh, sure. Like I said, I wasn't refuting their point.