I used netstrings in Firestr's (https://github.com/mempko/firestr/blob/master/src/util/menco...) protocol. I picked them precisely because it is safer to parse.

Though I suspect my parsing code still have bugs and exploits.... Looks like I need to put a guard in get_util for the max size.