In particular premature EOF and bad `vm_magic` should be handled, but the rest of the header should probably be validated too.
In particular premature EOF and bad
vm_magicshould be handled, but the rest of the header should probably be validated too.