Fix unwrap being hit in macro when malicious input is given

[ephraimkunz]

I ran cargo fuzz on my code and noticed a crash in the deserializer code when malformed XML was deserialized. Instead of panicking due to the unwrap, return an error.