dfa: improve boundary checks in decode_dds1()