use the type checker to fix the input to 0 > 255
because otherwise we will silently underflow