check entries against field_size, potential malloc overflow in read_stsz, fix #1357