but i'd like to
phrase the man page as [va, va+len) will be valid unless the
return value is (void*)-1.  there are no promises about other
addresses just before or after this range.