unistr/u8-to-u32: Reject invalid input.