avcodec/dvdsubdec: fix out of bounds accesses