rtmp: fix buffer overflows in ff_amf_tag_contents()