Merge branch 'es/want-color-fd-defensive'

Futureproofing a helper function that can easily be misused. * es/want-color-fd-defensive: color: protect against out-of-bounds reads and writes