ass_split: fix out of array access in ass_split()