Fixes out of array read

Found-by: Thomas Garnier using libFuzzer
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit c92f5584)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>