let sub ra ofs len = if ofs < 0 || len < 0 || ofs + len > length ra then invalid_arg "sub" else unsafe_sub ra ofs len