s4-rootdse: setup length after NULL check