unistr/u16-to-u32: Reject invalid input.