Also use av_mallocz_array().

Fixes CID1396839.

(cherry picked from commit 16a75304)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>