If evaluating stderr, the first step should be determining if a line is of a known format before treating it as an input.

I'm not sure how well that'd work due to the lack of buffering. But I wouldn't want to go anywhere near stderr in production code.