rose: Add length checks to CALL_REQUEST parsing