verify: stop on actual number of bytes needed to be verified