Adding an explicit check clarifies at the first glance that the array bounds are respected without needing knowledge about MAX_CAPS_PER_MSG and L4_UTCB_GENERIC_DATA_SIZE (used for dimensioning 'mr').