Avoid out-of-bounds access to messages

The asserts should prevent that the developers make a mistake, but in
production the asserts are often not active and we don't want a crash
if the function is ever called with an invalid index.