Fixes out of array read

Found-by: Thomas Garnier using libFuzzer
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 85d23e5c)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>